github.com/decred/politeia@v1.4.0/SECURITY.md (about)

     1  # Security Policy
     2  
     3  ## Reporting a Vulnerability
     4  
     5  The Decred project runs a bug bounty program which is approved by the
     6  stakeholders and is funded by the Decred treasury.
     7  
     8  Please refer to the bounty website to understand the
     9  [scope](https://bounty.decred.org/#Scope) and how to
    10  [submit](https://bounty.decred.org/#Submit%20Vulnerability) a vulnerability.
    11  
    12  https://bounty.decred.org/
    13  
    14  ## Supported Versions
    15  
    16  All bugs must be reproducible in the latest production release or the master
    17  branch of the code.