misc_pterodactyl-panel/SECURITY.md

21 lines
1.1 KiB
Markdown
Raw Normal View History

2020-05-25 22:08:47 +00:00
# Security Policy
## Supported Versions
2022-12-12 21:35:24 +00:00
2020-05-25 22:08:47 +00:00
The following versions of Pterodactyl are receiving active support and maintenance. Any security vulnerabilities discovered must be reproducible in supported versions.
2022-07-24 23:45:49 +00:00
| Panel | Daemon | Supported |
2022-10-05 16:31:06 +00:00
|--------|--------------|--------------------|
2022-07-24 23:45:49 +00:00
| 1.10.x | wings@1.7.x | :white_check_mark: |
2022-12-12 21:35:24 +00:00
| 1.11.x | wings@1.11.x | :white_check_mark: |
2022-10-05 16:31:06 +00:00
| 0.7.x | daemon@0.6.x | :x: |
2021-10-02 15:21:04 +00:00
2020-05-25 22:08:47 +00:00
## Reporting a Vulnerability
2022-10-05 16:31:06 +00:00
Please reach out directly to any project team member on Discord when reporting a security vulnerability, or you can email `matthew@pterodactyl.io`.
2020-05-25 22:08:47 +00:00
We make every effort to respond as soon as possible, although it may take a day or two for us to sync internally and determine the severity of the report and its impact. Please, _do not_ use a public facing channel or GitHub issues to report sensitive security issues.
As part of our process, we will create a security advisory for the affected versions and disclose it publicly, usually two to four weeks after a releasing a version that addresses it.