Skip to content

SECURITY.md

Latest commit

 

History

History
29 lines (21 loc) · 1.13 KB

SECURITY.md

File metadata and controls

29 lines (21 loc) · 1.13 KB
Raw

Security Policy

This document describes the security policy for Primo CMS.

Supported Versions

Version Supported
3.0.x YES ✅
< 3.0 NO ❌

Reporting a Vulnerability

  1. When you find a vulnerability related to Primo CMS, report them via email to security@primo.build. Do not send the information anywhere else. Note that issues section is not the place for vulnerabilities.

  2. The Primo team reviews the report in one full week and gets back to you with instructions on how to proceed.

  3. You must keep vulnerability as a secret until it has been patched and you have received a written permission from the Primo team to publicly disclose the vulnerability. The permission will be sent from email address attached to primo.build domain name.

  4. To ensure that the Primo team keeps the software secure and its users safe, you may provide a deadline for the vulnerability disclosure. The deadline must be at least 90 days and should follow established practices on security research and vulnerability disclosure.