Skip to content

Repository navigation

Security: freva-org/freva-web-nextgen

Security

Report a vulnerability

SECURITY.md

Security policy

Reporting a vulnerability

Please report security issues privately, not in a public issue or pull request.

Use GitHub's private vulnerability reporting: Security tab → Report a vulnerability.

Include the affected package and version (or commit), the impact, and how to reproduce it.

Supported versions

Only the latest release of each @freva-org/* package receives security fixes.

Out of scope here

  • STAC Browser's own code: report it upstream.
  • A specific Freva deployment: report it to the organisation that runs it.

There aren't any published security advisories