Skip to content

Repository navigation

Security: Jackpison/Homebase-Hub

Security

Report a vulnerability

.github/SECURITY.md

Security policy

Reporting a problem

To report a problem, open an issue. For anything else, message @Jackpison on Telegram.

If you would rather report it privately, GitHub's Security > Report a vulnerability on this repository works too, when it is switched on.

Say which version you use (Settings > Changelog), what you found, and how to see it happen. A short example or a few steps is enough.

Supported versions

Only the latest release gets fixes. Fixes ship as a new release, which you install from Settings > Updates.

In scope

  • The site itself: everything in the update zip (login, two-step login, encryption, backups, the pages and their API, Telegram, Tools).
  • The update system: updates from GitHub and by upload, the checks on a zip, Go Back.
  • The project website (https://jackpison.github.io/Homebase-Hub/) and the release files.

Out of scope: problems in your own server, PHP or host settings, and attacks that need someone who already has your website password or your server's files.

What to expect

This is a one-person project. You will get a reply as soon as the message is read, and a fix as soon as one is ready, with no promise of a fixed number of days. When a fix ships, the changelog says what was fixed; you are credited if you want to be.

There aren't any published security advisories