Skip to content

Security: UsmanovMahmudkhan/campus-auth-java

Security

SECURITY.md

Security Policy

Supported Versions

Version Supported
0.2.7 Yes
Earlier versions No

Responsible Disclosure

Please do not open public issues for vulnerabilities, credential leaks, bypass techniques, or sensitive service behavior.

Report security concerns privately to the maintainer through the contact information listed in the repository profile. Include:

  • A short description of the issue.
  • Steps to reproduce using non-sensitive test data.
  • The affected version or commit.
  • Any suggested fix or mitigation.

Credential Safety

  • Never commit real credentials, tokens, cookies, private identifiers, or session data.
  • Prefer the interactive CLI password prompt for local use.
  • Redact secrets and personal information from logs, screenshots, issues, and pull requests.
  • Do not run the tool against accounts, systems, or services unless you are authorized to do so.

Intended Use

This project is provided strictly for educational, research, and authorized testing purposes only. Misuse for unauthorized access, privacy violations, abuse, harassment, disruption, or illegal activity is not supported.

There aren't any published security advisories