If you discover a security vulnerability in Stellar, we appreciate your responsible disclosure. Please send an email to geniussantu1983@gmail.com with the following details:
- Description of the vulnerability
- Steps to reproduce the issue
- Potential impact
- Any suggested mitigations (optional)
We aim to acknowledge all reports within 48 hours and provide guidance on mitigation or patches as quickly as possible.
- Stellar version 1.x and above are currently supported.
- Older versions may not receive security updates.
When contributing to Stellar, please adhere to these security guidelines:
- Do not commit secrets (API keys, passwords, tokens) to the repository.
- Validate all inputs in CLI commands and scripts.
- Avoid using insecure or deprecated libraries.
- Report potential security issues via the contact email before opening a public issue.
- Security patches will be prioritized and released as soon as feasible.
- All critical vulnerabilities will be addressed immediately.
- Minor security fixes will be included in regular releases.
We recognize and thank contributors who responsibly report security issues and help make Stellar safer for everyone.
This document is intended to provide clear guidelines for responsible reporting and handling of security issues in the Stellar project.