Skip to content

Security: Studio-42/elFinder

.github/SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please do not report it via public GitHub issues.

Instead, use GitHub's private vulnerability reporting feature:

  1. Go to the Security tab of this repository
  2. Click "Report a vulnerability"
  3. Submit the details privately

This allows us to investigate and fix the issue before public disclosure.

What to Include

Please include as much information as possible:

  • Description of the vulnerability
  • Steps to reproduce
  • Affected versions
  • Potential impact
  • Proof of concept (if available)

Response Policy

  • We will acknowledge your report as soon as possible
  • We will investigate and work on a fix
  • We may ask for additional information if needed
  • We will coordinate responsible disclosure

Disclosure

Please do not publicly disclose the vulnerability until we have addressed it.

Thank you for helping keep this project secure.

Learn more about advisories related to Studio-42/elFinder in the GitHub Advisory Database