Skip to content

Security: programmersd21/stellar

Security

SECURITY.md

Security Policy for Stellar

Reporting a Vulnerability

If you discover a security vulnerability in Stellar, we appreciate your responsible disclosure. Please send an email to geniussantu1983@gmail.com with the following details:

  • Description of the vulnerability
  • Steps to reproduce the issue
  • Potential impact
  • Any suggested mitigations (optional)

We aim to acknowledge all reports within 48 hours and provide guidance on mitigation or patches as quickly as possible.

Supported Versions

  • Stellar version 1.x and above are currently supported.
  • Older versions may not receive security updates.

Security Best Practices for Contributors

When contributing to Stellar, please adhere to these security guidelines:

  • Do not commit secrets (API keys, passwords, tokens) to the repository.
  • Validate all inputs in CLI commands and scripts.
  • Avoid using insecure or deprecated libraries.
  • Report potential security issues via the contact email before opening a public issue.

Patch Policy

  • Security patches will be prioritized and released as soon as feasible.
  • All critical vulnerabilities will be addressed immediately.
  • Minor security fixes will be included in regular releases.

Security Acknowledgements

We recognize and thank contributors who responsibly report security issues and help make Stellar safer for everyone.


This document is intended to provide clear guidelines for responsible reporting and handling of security issues in the Stellar project.

There aren’t any published security advisories