Skip to content

Security: equalizedigital/boardscribe

Security

.github/SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in BoardScribe, please report it privately rather than opening a public GitHub issue. Email details to security at our domain so we can deal with it securely and quickly.

Please include:

  • A description of the vulnerability and its potential impact.
  • Step-by-step instructions to reproduce the issue.
  • The plugin version (and Pro/free edition) affected, if known.

Responding to Vulnerability Reports

Equalize Digital takes security bugs seriously. We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your report promptly, investigate, and keep you updated as we work toward a fix.

Disclosing a Vulnerability

Once an issue is reported, Equalize Digital uses the following disclosure process:

  • When a report is received, we confirm the issue and determine its severity.
  • If we know of specific third-party services or software that require mitigation before publication, those projects will be notified.
  • A patch release is prepared and published.
  • Release notes and our readme.txt changelog will note the fix once it is public.

We credit reporters for identifying vulnerabilities, although we will keep your name confidential if you request it.

There aren't any published security advisories