The project MUST have a documented process for responding to vulnerability reports.

shieldworks / aegis

Aegis: Keep Your Secrets… Secret

https://vsecm.com

MIT License

31 stars 3 forks source link

The project MUST have a documented process for responding to vulnerability reports. #413

Open v0lkan opened 1 year ago

v0lkan commented 1 year ago

This is strongly related to vulnerability_report_process, which requires that there be a documented way to report vulnerabilities. It also related to vulnerability_report_response, which requires response to vulnerability reports within a certain time frame.