Skip to content

Security: cheng-alvin/jas

Security

SECURITY.md

Security and safety

We value security of our assembler, nothing's perfect, and we acknowledge that there can be security vulnerabilities inside our code. Therefore, please follow the guidelines to report vulnerabilities and safety issues. We'll aim to get back to any security issue or known vulnerability within 7 days of submission.

Issue or email?

Some vulnerabilities are critical and people may use it to their advantage go affect the stable versions, that means, some vulnerabilities will be reported by the means of email and other safe modes. See the table below for how to report.

Version How to report
> 1.x.y Report via email etc
0.x.y Report via issues

We DO NOT accept any issues reported via email for 0.x.y versions!!

If you are reporting for > 1.x.y versions, please send your emails to [email protected]. Write it up as if you are doing it for a Github issue, feel free to use issue templates or other resources. If email is unacceptable, reporting via Discord is also ok, please send a message to AlvinC#2300 (But may take longer to process).

There aren’t any published security advisories