-
-
Notifications
You must be signed in to change notification settings - Fork 1.4k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
5 additions
and
5 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -16,22 +16,22 @@ Versions with :warning: will be supported for security issues, however you won't | |
|
||
If you cannot update to the latest stable version available because, for example, your server does not meet the minimum PHP requirements, you can manually install a previous version by downloading the package from our Releases directory (https://github.com/getgrav/grav/releases). | ||
|
||
## Reporting a Vulnerability | ||
## :pencil: Reporting a Vulnerability | ||
|
||
Please contact [email protected] with a detailed explanation of the security issue found. If it appears to be a legitimate issues, please submit an **advisory via GitHub Security**: https://github.com/getgrav/grav/security/advisories | ||
|
||
>> NOTE: Please do not use 3rd party security issue reporting services, we like to keep everything in the GitHub ecosystem for easier manageability. | ||
> NOTE: Please do not use 3rd party security issue reporting services, we like to keep everything in the GitHub ecosystem for easier manageability. | ||
## Note on Security Severity | ||
## :pushpin: Note on Security Severity | ||
|
||
IMPORTANT!!! Please use the following guidlines when selecting a **Severity**. Submitted advisories that are marked **High** or **Critical** that don't meet the guidelines below will be cliosed. | ||
> NOTE: Please use the following guidlines when selecting a **Severity**. Submitted advisories that are marked **High** or **Critical** that don't meet the guidelines below will be cliosed._ | ||
* **CRITICAL** - no account required, can modify content, or run malicious code or nefarious activity without any access. | ||
* **HIGH** - publisher level account able to run malicious code or nefarious activity, or other high level security things. | ||
* **MODERATE** - admin level account able to run malicious code or do nefarious things. other moderate security things. | ||
* **LOW** - super admin level account able to run malicious code or do nefarious things. other minor security things. | ||
|
||
## Bug Bounties | ||
## :bug: Bug Bounties | ||
|
||
We do greatly appreciate your efforts to improve Grav, but unfortunately because we are a small open source project, we **do not have the resources to offer bounties** for security issues found. | ||
|
||
|