mirror of
https://github.com/callstack/agent-device.git
synced 2026-09-14 20:06:34 +08:00
24 lines
897 B
Markdown
24 lines
897 B
Markdown
|
# Security Policy
|
||
|
|
|
||
|
|
## Supported Versions
|
||
|
|
|
||
|
|
Security fixes are provided for the latest released version of `agent-device`.
|
||
|
|
|
||
|
|
| Version | Supported |
|
||
|
|
| -------------- | --------- |
|
||
|
|
| Latest release | ✅ |
|
||
|
|
| Older releases | ❌ |
|
||
|
|
|
||
|
|
## Reporting a Vulnerability
|
||
|
|
|
||
|
|
Please report vulnerabilities privately through
|
||
|
|
[GitHub Security Advisories](https://github.com/callstack/agent-device/security/advisories/new).
|
||
|
|
Do not open a public issue or pull request for an undisclosed vulnerability.
|
||
|
|
|
||
|
|
Include the affected version, impact, reproduction steps, and any suggested fix. Never include real
|
||
|
|
credentials or personal data; use clearly fake values in examples.
|
||
|
|
|
||
|
|
We aim to acknowledge reports within three business days and provide a status update within seven
|
||
|
|
days. We will confirm whether the report is accepted or declined and coordinate any fix and public
|
||
|
|
disclosure with the reporter.
|