mirror of
https://github.com/better-auth/better-auth.git
synced 2026-10-18 11:32:15 -05:00
31 lines
1.0 KiB
Markdown
31 lines
1.0 KiB
Markdown
# Security Policy
|
||
|
||
### Reporting a Vulnerability
|
||
|
||
If you believe you’ve found a security vulnerability, please follow these steps:
|
||
|
||
1. Do not disclose the vulnerability publicly until it has been addressed by our
|
||
team.
|
||
2. Report the vulnerability via
|
||
[GitHub Security Advisories](https://github.com/better-auth/better-auth/security/advisories/new).
|
||
Include:
|
||
* A description of the vulnerability
|
||
* Steps to reproduce the vulnerability
|
||
* Potential impact of the vulnerability
|
||
* Any suggestions for mitigation
|
||
* Any other relevant information
|
||
3. We will respond to your report within 72 hours.
|
||
4. If the issue is confirmed, we will release a patch as soon as possible.
|
||
|
||
### Disclosure Policy
|
||
|
||
If the issue is confirmed, we will release a patch as soon as possible.
|
||
Once a patch is released, we will disclose the issue publicly.
|
||
If 90 days has elapsed and we still don’t have a fix, we will disclose the issue
|
||
publicly.
|
||
|
||
## Supported Versions
|
||
|
||
We only support the latest version of Better Auth.
|
||
Older versions are not supported.
|