Skip to content

Repository navigation

Security: cdxgen/.github

Security

SECURITY.md

Security policy

This policy applies to every repository in the cdxgen organization that does not have its own SECURITY.md.

Reporting a vulnerability

Please do not report security issues in public issues, discussions or pull requests. Instead, email cloud@appthreat.com with the word "SECURITY" in the subject line. Include:

  • the affected repository and version
  • steps to reproduce the issue, or a proof of concept
  • what an attacker could do with it

We will acknowledge your report, keep you informed while we triage and fix it, and coordinate disclosure with you. Fixed issues are published as GitHub Security Advisories, with a CVE where appropriate.

Reports must describe a real, reproducible issue. We may close reports that we cannot reproduce, including unverified AI-generated reports, without further reply.

Please report vulnerabilities in third-party dependencies to their maintainers.

There aren't any published security advisories