Skip to content

SECURITY.md

Latest commit

 

History

History
38 lines (25 loc) · 1.53 KB

SECURITY.md

File metadata and controls

38 lines (25 loc) · 1.53 KB
Raw

Security Policy

Supported Versions

Security fixes are applied to the latest release only. Older versions do not receive backported security patches.

Version Supported
Latest release Yes
Older releases No

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

Report vulnerabilities privately using GitHub's private vulnerability reporting, or send an email to security@avaloniaui.net.

Include as much of the following as possible:

  • A description of the vulnerability and its potential impact
  • The affected component, file, or version
  • Steps to reproduce or a proof-of-concept
  • Any suggested mitigations, if known

We will acknowledge reports within 2 business days and provide a resolution timeline within 10 business days. We will keep you informed of progress and credit you in the advisory unless you prefer to remain anonymous.

Scope

This policy covers the packages published from this repository:

  • Avalonia.Controls.Maui
  • Avalonia.Controls.Maui.Desktop
  • Avalonia.Controls.Maui.Essentials
  • Avalonia.Controls.Maui.Compatibility
  • Avalonia.Controls.Maui.SkiaSharp.Views
  • Avalonia.Controls.Maui.SourceGenerators

Security issues in Avalonia itself should be reported to the Avalonia repository. Issues in .NET MAUI should be reported to Microsoft.