This repository contains documentation and indexes. It does not contain runtime code. Security reports about a product should go to that product’s repository.
Report vulnerabilities privately to security@axisvela.com. Do not open a public issue for a security vulnerability.
Include:
- a description of the issue and its potential impact;
- the affected repository, document, or example;
- reproduction steps or a proof of concept;
- any suggested mitigation.
If the report concerns a product runtime, protocol, schema, or SDK, use the same private channel and name the product. We will route it to the right repository.
- In scope: documentation errors that could cause a security-relevant misconfiguration; malicious links or examples in this repository.
- Out of scope for this repository: vulnerabilities in product code. Those
belong to the product repository and its
SECURITY.md.
| Phase | Target |
|---|---|
| Acknowledge | 48 hours |
| Triage | 5 business days |
| Fix or mitigation | Depends on severity |
| Coordinated disclosure | Mutually agreed date |
Thank you for reporting responsibly.