Skip to content

Security: HyperionGray/starbelly

SECURITY.md

Security Policy

Supported Versions

We release patches for security vulnerabilities for the following versions:

Version Supported
2.0.x
1.0.x

Reporting a Vulnerability

If you discover a security vulnerability within Starbelly, please send an email to the maintainers at Hyperion Gray (acaceres@hyperiongray.com). All security vulnerabilities will be promptly addressed.

Please do not publicly disclose the issue until it has been addressed by the team.

What to Include

When reporting a vulnerability, please include:

  • Description of the vulnerability
  • Steps to reproduce the issue
  • Potential impact
  • Any suggested fixes (if available)

We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your contributions.

Security Update Process

  1. The security report is received and assigned to a primary handler
  2. The problem is confirmed and affected versions are determined
  3. Code is audited to find any similar problems
  4. Fixes are prepared for all supported releases
  5. New versions are released and announcements are made

There aren't any published security advisories