github.com/icyphox/x@v0.0.355-0.20220311094250-029bd783e8b8/SECURITY.md (about) 1 <!-- 2 3 Thank you for contributing changes to this document! Because we use a central repository 4 to synchronize this file across all our repositories, make sure to make your edits 5 in the correct file, which you can find here: 6 7 https://github.com/ory/meta/blob/master/templates/repository/SECURITY.md 8 9 --> 10 11 <!-- START doctoc generated TOC please keep comment here to allow auto update --> 12 <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE --> 13 14 - [Security Policy](#security-policy) 15 - [Supported Versions](#supported-versions) 16 - [Reporting a Vulnerability](#reporting-a-vulnerability) 17 18 <!-- END doctoc generated TOC please keep comment here to allow auto update --> 19 20 # Security Policy 21 22 ## Supported Versions 23 24 We release patches for security vulnerabilities. Which versions are eligible 25 receiving such patches depend on the CVSS v3.0 Rating: 26 27 | CVSS v3.0 | Supported Versions | 28 | --------- | ----------------------------------------- | 29 | 9.0-10.0 | Releases within the previous three months | 30 | 4.0-8.9 | Most recent release | 31 32 ## Reporting a Vulnerability 33 34 Please report (suspected) security vulnerabilities to 35 **[security@ory.sh](mailto:security@ory.sh)**. You will receive a response from 36 us within 48 hours. If the issue is confirmed, we will release a patch as soon 37 as possible depending on complexity but historically within a few days.