diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..106ffee --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,10 @@ +# Security Policy + +## Supported Versions +The supported version is always the currently available [App Store](https://apps.apple.com/us/app/bubble/id6477757490) version, currently being 1.3.0. + +## Reporting a Vulnerability + +To report a vulnerability, [open an issue](https://github.com/lumaa-dev/BubbleApp/issues/new?assignees=&labels=&projects=&template=bug_report.md&title=[Vulnerability]+Title), send an email to [lumaa@lumaa.fr](mailto:lumaa@lumaa.fr), send a private message on [Mastodon](https://mastodonshare.com/?text=@Bubble@mastodon.online+[Vulnerability]+Explain+the+vulnerability+here) or on [Discord](https://discord.gg/MaHcRbkX46) in the [#app-feedback](https://discord.com/channels/1206293130236788846/1206314908040568852) channel. + +Explain clearly the vulnerability and how to reproduce the vulnerability, by providing a step-by-step guide. If it is not correctly explained or cannot be reproduced, your issue will be dismissed as "cannot reproduce".