How do I report a security vulnerability in WorkAdventure?

Q: How do I report a security vulnerability in WorkAdventure?

Thank you for looking. Please report vulnerabilities privately, so that we can fix them before they are disclosed. Send the details by e-mail to security@workadventu.re. You may also ping us in a GitHub issue to say that you have sent a report, but please put no details in the issue: anything posted there is public. We assess every report as soon as possible, on a best-effort basis, and give you an estimate of when a fix and a release will be available, ahead of any public disclosure. Security patches are applied to the latest tagged release (which is what runs on play.workadventu.re) and to the master branch; we do not patch past releases. We do not run a bug bounty program. The full policy is in the SECURITY.md file of the WorkAdventure repository.

Thank you for looking. Please report vulnerabilities privately, so that we can fix them before they are disclosed.

Send the details by e-mail to [email protected]. You may also ping us in a GitHub issue to say that you have sent a report, but please put no details in the issue: anything posted there is public.

We assess every report as soon as possible, on a best-effort basis, and give you an estimate of when a fix and a release will be available, ahead of any public disclosure. Security patches are applied to the latest tagged release (which is what runs on play.workadventu.re) and to the master branch; we do not patch past releases. We do not run a bug bounty program.

The full policy is in the SECURITY.md file of the WorkAdventure repository.