Skip to content

Commit

Permalink
Update SECURITY.md
Browse files Browse the repository at this point in the history
  • Loading branch information
@yogeshojha
yogeshojha authored Feb 9, 2025
1 parent 0c6e64f commit fd6c23f
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions .github/SECURITY.md
View file
Original file line number Diff line number Diff line change
@@ -1,5 +1,12 @@

# Security Policy

> **[IMPORTANT NOTICE - February 9, 2025]**
> reNgine is currently undergoing a major refactoring to address all XSS-related vulnerabilities. While we are committed to security, we are temporarily suspending new XSS vulnerability reports until this refactoring is complete. We will continue to accept and investigate all other types of security vulnerabilities. Thank you for your understanding and continued support in making reNgine more secure.
>
> Please note that most reported XSS vulnerabilities in reNgine affect on-premise installations with limited exploitability. Nevertheless, we are committed to fixing these issues systematically through our ongoing refactoring effort.

We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your contributions.

To report a security vulnerability, please follow these steps:
Expand Down

0 comments on commit fd6c23f

Please sign in to comment.