From 0db25dc83b6dd3125bc45c7c73347a61441ee92c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?G=C3=B6ksel=20K=C3=BC=C3=A7=C3=BCk=C5=9Fahin?= Date: Sun, 5 Jan 2025 13:11:10 +0300 Subject: [PATCH] Create SECURITY.md --- SECURITY.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..d20ab11 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,30 @@ +# Security Policy + +## Supported Versions + +The following versions of `es-query-builder` are currently supported with security updates: + +| Version | Supported | +| ------- | ------------------ | +| ≥ 0.3.6 | ✅ Supported | +| < 0.3.6 | ❌ Not Supported | + +## Reporting a Vulnerability + +We encourage the community to report security vulnerabilities responsibly to help us maintain the integrity of `es-query-builder`. + +### How to Report +- Please create a **GitHub Issue** in the [repository Issues section](https://github.com/Trendyol/es-query-builder/issues). +- Include the following details in your report: + - A description of the vulnerability. + - Steps to reproduce the issue. + - (Optional) Your suggestions for mitigation or fixes. + +### What to Expect +1. **Acknowledgment**: We will respond to your issue within **48 hours**. +2. **Resolution Process**: + - Accepted vulnerabilities will be assigned a severity level and prioritized. + - A fix is typically delivered within **30 days**, depending on severity. +3. **Confidentiality**: Please avoid sharing the vulnerability details publicly until a fix has been released. + +We appreciate your contributions to keeping `es-query-builder` secure!