loopbackio / security

[WORK IN PROGRESS] A centralised repository for all security-related matters on the LoopBack Project.
MIT License
4 stars 1 forks source link

Align with FIRST Guidelines and Practices for Multi-Party Vulnerability Coordination and Disclosure #29

Open achrinza opened 2 years ago

achrinza commented 2 years ago

The FIRST Guidelines and Practices for Multi-Party Vulnerability Coordination and Disclosure provides guidelines on how to handle end-to-end the process of managing vulnerability disclosure from prior the disclosure (e.g. providing clear communication channels) to after disclosure.

Reference

FIRST Guidelines and Practices for Multi-Party Vulnerability Coordination and Disclosure v1.1: https://www.first.org/global/sigs/vulnerability-coordination/multiparty/guidelines-v1.1 Related: https://github.com/loopbackio/security/issues/22