Skip to content

Security: Caik/spec4j

Security

SECURITY.md

πŸ”’ Security Policy

πŸ“‹ Supported Versions

Version Supported
2.x βœ… Yes
1.x βœ… Yes
< 1.0 ❌ No

🚨 Reporting a Vulnerability

If you discover a security vulnerability in Spec4j, please report it responsibly.

⚠️ Do NOT open a public issue for security vulnerabilities.

How to Report

  1. GitHub Private Reporting (Preferred)
    Use GitHub's private vulnerability reporting to submit a report directly.

  2. Email
    If private reporting is not available, contact the maintainer directly via GitHub.

What to Include

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Suggested fix (if any)

What to Expect

  • Acknowledgment: Within 48 hours
  • Initial Assessment: Within 7 days
  • Resolution Timeline: Depends on severity, but we aim to address critical issues promptly

We appreciate your help in keeping Spec4j secure! πŸ™

There aren't any published security advisories