Created SECURITY.md

loxilb-io · Aug 3, 2022 · cedc839 · cedc839
1 parent 9ff0cbd
commit cedc839
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,17 @@
+# Security Policy
+
+## Supported Versions
+
+We release patches for security vulnerabilities. Which versions are eligible receiving such patches depend on the CVSS v3.0
+Rating:
+
+| CVSS v3.0 | Supported Versions                        |
+| --------- | ----------------------------------------- |
+| 9.0-10.0  | Releases within the previous three months |
+| 4.0-8.9   | Most recent release                       |
+
+## Reporting a Vulnerability
+
+Please report (suspected) security vulnerabilities to **[[email protected]](mailto:[email protected])**. You will receive a response
+from us within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but
+historically within a few days.