|
| 1 | +## Security |
| 2 | + |
| 3 | +Hive Games takes the security of our software products and services seriously, which includes all source code |
| 4 | +repositories managed through our GitHub organizations. |
| 5 | + |
| 6 | +If you believe you have found a security vulnerability in any Hive Games repository which follows the MITRE.org |
| 7 | +definition of “a weakness in the computational logic (e.g., code) found in software and hardware components that, when |
| 8 | +exploited, results in a negative impact to confidentiality, integrity, OR availability. Mitigation of the |
| 9 | +vulnerabilities in this context typically involves coding changes but could also include specification changes or even |
| 10 | +specification deprecations (e.g., removal of affected protocols or functionality in their entirety).” MITRE.org CNA |
| 11 | +Rules 7.1, please report it to us as described below. |
| 12 | + |
| 13 | +## Reporting Security Issues |
| 14 | + |
| 15 | +**Please do not report security vulnerabilities through public GitHub issues.** |
| 16 | + |
| 17 | +Instead, please send email to [secure@hivemc.com](mailto:secure@hivemc.com). |
| 18 | + |
| 19 | +You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we |
| 20 | +received your original message. |
| 21 | + |
| 22 | +Please include the requested information listed below (as much as you can provide) to help us better understand the |
| 23 | +nature and scope of the possible issue: |
| 24 | + |
| 25 | +* Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.) |
| 26 | +* Full paths of source file(s) related to the manifestation of the issue |
| 27 | +* The location of the affected source code (tag/branch/commit or direct URL) |
| 28 | +* Any special configuration required to reproduce the issue |
| 29 | +* Step-by-step instructions to reproduce the issue |
| 30 | +* Proof-of-concept or exploit code (if possible) |
| 31 | +* Impact of the issue, including how an attacker might exploit the issue |
| 32 | + |
| 33 | +This information will help us triage your report more quickly. |
| 34 | + |
| 35 | +## Preferred Languages |
| 36 | + |
| 37 | +We prefer all communications to be in English. |
0 commit comments