The security of maevsi is a top priority for our team. We believe in transparency and collaboration with the community to identify and address potential security vulnerabilities. This disclosure policy outlines the procedures for reporting security issues in maevsi and how we handle such reports.

If you discover a security vulnerability in maevsi, we encourage you to report it to us promptly. To report a security issue, please follow these steps:

Send an email to contact+security@maev.si with the subject line "Security Issue: [Brief Description]." Please provide a detailed description of the vulnerability, including the following:

A concise summary of the issue. A detailed explanation of the vulnerability and its potential impact. Steps to reproduce the vulnerability (if applicable). Any additional information that can help us understand and address the issue.

Upon receiving a security report, the maevsi team will follow these steps:

We will acknowledge your report as soon as possible and provide an estimated timeline for the review and resolution process.

Our team will review the reported issue to assess its validity and severity. We may request additional information from you if necessary.

Once we have confirmed and understood the vulnerability, we will develop and test a fix. We will try to resolve the issue as quickly as possible.

We will keep you informed of our progress throughout the process and notify you when a fix is available. If the issue affects multiple projects, we may coordinate with other project maintainers and vendors.

We believe in responsible disclosure to protect our users.

If the issue is resolved, we will coordinate with you to establish a mutually agreed-upon release date for the fix. We will issue a security advisory and update the project's documentation once the fix is publicly available.

We highly value the contributions of the security community and will provide credit to individuals or organizations who responsibly report security vulnerabilities. However, if you prefer to remain anonymous, we will respect your wishes.

maevsi will not pursue legal action against security researchers who follow this disclosure policy and act in good faith. We appreciate your efforts to help us maintain the security of our project.

This security disclosure policy may be updated or revised from time to time.

Last Updated: 2024-09-12