Ensuring the security of our software is a paramount concern for Smiosoft. This document outlines our security procedures and policies set for our projects.
If you believe you've found a security vulnerability in one of our projects, we appreciate your help in reporting it to us responsibly.
Please do NOT report security vulnerabilities through public GitHub issues.
Email the vulnerability details to security@smiosoft.com / nick.smirnoff@smiosoft.com. Please provide as much information as possible to help us understand the scope and severity of the potential issue.
Please provide the following:
- A description of the vulnerability.
- Steps to reproduce the issue, if possible.
- Potential impacts of the vulnerability.
- Any potential mitigations or workarounds you've identified.
After you report a vulnerability:
- We will acknowledge your report.
- We will investigate the reported issue and determine its severity and impact.
- You'll receive regular updates on our progress.
- Once the issue is resolved, we'll make a public announcement. You will be credited for your discovery unless you choose to remain anonymous.