github.com/pelicanplatform/pelican@v1.0.5/SECURITY.md (about)

     1  # Security Policy
     2  
     3  ## Supported Versions
     4  
     5  We currently offer support for the following versions of Pelican:
     6  
     7  | Version  | Supported          |
     8  | -------  | ------------------ |
     9  | >=v7.0.0 | :white_check_mark: |
    10  | <v7.0.0  | :x:                |
    11  
    12  ## Reporting a Vulnerability or Security Issue
    13  
    14  We recognize that trust is hard to earn and easy to lose. That's why we take security incidents
    15  very seriously and strive to answer all concerns in as timely a manner as we are able. When you
    16  send us a report, we will acknowledge receipt and aim to provide an initial assessment as soon as
    17  possible. Our team is committed to resolving issues promptly.
    18  
    19  If you think you've discovered a security concern in Pelican, or if you become aware of any
    20  ongoing malicious activity regarding our software, **please let us know immediately** by emailing
    21  [security@pelicanplatform.org](mailto:security@pelicanplatform.org) with:
    22  - A description of the concern
    23  - Any useful information we may need for reproduction/verification
    24  - Affected systems/software versions
    25  - Your contact information and whether you're willing to participate in follow-up conversations
    26  
    27  Pelican is an open source platform, and we also welcome community bugfixes. If you would like to
    28  contribute to Pelican, please open a pull request!