If you discover a security vulnerability in BoardScribe, please report it privately rather than opening a public GitHub issue. Email details to security at our domain so we can deal with it securely and quickly.
Please include:
- A description of the vulnerability and its potential impact.
- Step-by-step instructions to reproduce the issue.
- The plugin version (and Pro/free edition) affected, if known.
Equalize Digital takes security bugs seriously. We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your report promptly, investigate, and keep you updated as we work toward a fix.
Once an issue is reported, Equalize Digital uses the following disclosure process:
- When a report is received, we confirm the issue and determine its severity.
- If we know of specific third-party services or software that require mitigation before publication, those projects will be notified.
- A patch release is prepared and published.
- Release notes and our
readme.txtchangelog will note the fix once it is public.
We credit reporters for identifying vulnerabilities, although we will keep your name confidential if you request it.