mirror of
https://github.com/louislam/uptime-kuma.git
synced 2024-11-09 23:24:07 -08:00
31 lines
1.3 KiB
Markdown
31 lines
1.3 KiB
Markdown
# Security Policy
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
1. Please report security issues to https://github.com/louislam/uptime-kuma/security/advisories/new.
|
|
2. Please also create an empty security issue to alert me, as GitHub Advisories do not send a notification, I probably will miss it without this. https://github.com/louislam/uptime-kuma/issues/new?assignees=&labels=help&template=security.md
|
|
|
|
Do not use the public issue tracker or discuss it in public as it will cause more damage.
|
|
|
|
## Do you accept other 3rd-party bug bounty platforms?
|
|
|
|
At this moment, I DO NOT accept other bug bounty platforms, because I am not familiar with these platforms and someone has tried to send a phishing link to me by doing this already. To minimize my own risk, please report through GitHub Advisories only. I will ignore all 3rd-party bug bounty platforms emails.
|
|
|
|
## Supported Versions
|
|
|
|
### Uptime Kuma Versions
|
|
|
|
You should use or upgrade to the latest version of Uptime Kuma. All `1.X.X` versions are upgradable to the latest version.
|
|
|
|
### Upgradable Docker Tags
|
|
|
|
| Tag | Supported |
|
|
|-|-|
|
|
| 1 | :white_check_mark: |
|
|
| 1-debian | :white_check_mark: |
|
|
| latest | :white_check_mark: |
|
|
| debian | :white_check_mark: |
|
|
| 1-alpine | ⚠️ Deprecated |
|
|
| alpine | ⚠️ Deprecated |
|
|
| All other tags | ❌ |
|