Skip to content

Repository navigation

Security: joostiphone/2Secret

Security

SECURITY.md

Security policy

2Secret protects people's most sensitive data. We take every report seriously.

Reporting a vulnerability

Please do not open a public issue for security problems. Use GitHub's private vulnerability reporting instead. Include:

  • what is affected (core, server, CLI, app, extension) and which version,
  • steps to reproduce or a proof of concept,
  • the impact you expect.

You will get an acknowledgement within a few days. Fixes are released as soon as possible and credited in the release notes unless you prefer otherwise.

Supported versions

Security fixes are made for the latest release.

Design

The cryptographic design and threat model are documented in docs/SECURITY.md.

There aren't any published security advisories