SnapShield is security software, so we treat vulnerability reports with priority. Thank you for helping keep SnapShield users safe.
Please do not report security vulnerabilities in public issues, discussions or pull requests.
Report them privately through GitHub:
- Go to the Security tab of this repository.
- Choose Report a vulnerability.
- Describe the issue, the affected SnapShield version and operating system, and the steps to reproduce it.
This includes anything that could let ransomware or an attacker avoid detection, disable or tamper with SnapShield, reach its dashboards without signing in, or read data they should not.
- We acknowledge new reports within 3 business days.
- We keep you updated while we investigate and fix the issue.
- We credit reporters in the release notes unless you ask us not to.
Please give us a reasonable chance to release a fix before you disclose the issue publicly.
Security fixes are made for the latest SnapShield release. Upgrade to the latest version before reporting, if you can.