[TODO: Refine this document.]
We take the security of our projects seriously. If you discover a security vulnerability within this repository, we encourage you to report it to us as quickly as possible.
Please DO NOT open a public issue on GitHub for security vulnerabilities.
Instead, please report it privately via [INSERT SECURITY CONTACT METHOD HERE].
To help us quickly understand and address the issue, please include the following information in your report:
- A clear and concise description of the vulnerability.
- Steps to reproduce the vulnerability.
- The potential impact of the vulnerability.
- Any proof-of-concept code or exploits (if applicable).
- Your contact information (optional, but helpful for follow-up).
We are committed to:
- Acknowledging your report within 48 hours.
- Providing a detailed response to your report within [X] business days, outlining the steps we are taking.
- Keeping you informed of our progress in addressing the vulnerability.
- Publicly acknowledging your responsible disclosure (if you agree).
Thank you for helping to keep our project secure.