uptime-kuma/SECURITY.md

# Security Policy

## Reporting a Vulnerability

1. Please report security issues to https://github.com/louislam/uptime-kuma/security/advisories/new.
1. Please also create a empty security issues for alerting me, as GitHub Advisory do not send a notification, I probably will miss without this. https://github.com/louislam/uptime-kuma/issues/new?assignees=&labels=help&template=security.md

Do not use the public issue tracker or discuss it in the public as it will cause more damage.

## Do you accept other 3rd-party bug bounty platforms?

At this moment, I DO NOT accept other bug bounty platforms, because I am not familiar with these platforms and someone have tried to send a phishing link to me by this already. To minimize my own risk, please report through GitHub Advisories only. I will ignore all 3rd-party bug bounty platforms emails.

## Supported Versions

### Uptime Kuma Versions

You should use or upgrade to the latest version of Uptime Kuma. All `1.X.X` versions are upgradable to the lastest version.

### Upgradable Docker Tags

| Tag | Supported          |
| ------- | ------------------ |
| 1 | :white_check_mark: |
| 1-debian | :white_check_mark: |
| latest | :white_check_mark: |
| debian | :white_check_mark: |
| 1-alpine | ⚠️ Deprecated |
| alpine | ⚠️ Deprecated |
| All other tags  | ❌ |
Create SECURITY.md 2021-08-19 09:32:57 +00:00			`# Security Policy`

Update SECURITY.md 2021-11-02 05:25:34 +00:00			`## Reporting a Vulnerability`

Update security report guide (#2762) 2023-02-12 16:33:37 +00:00			`1. Please report security issues to https://github.com/louislam/uptime-kuma/security/advisories/new.`
			`1. Please also create a empty security issues for alerting me, as GitHub Advisory do not send a notification, I probably will miss without this. https://github.com/louislam/uptime-kuma/issues/new?assignees=&labels=help&template=security.md`
Update SECURITY.md 2021-11-02 05:25:34 +00:00
Update SECURITY.md 2022-12-28 11:59:33 +00:00			`Do not use the public issue tracker or discuss it in the public as it will cause more damage.`
Update SECURITY.md 2021-11-02 05:25:34 +00:00
Update SECURITY.md 2023-02-10 09:46:44 +00:00			`## Do you accept other 3rd-party bug bounty platforms?`

			`At this moment, I DO NOT accept other bug bounty platforms, because I am not familiar with these platforms and someone have tried to send a phishing link to me by this already. To minimize my own risk, please report through GitHub Advisories only. I will ignore all 3rd-party bug bounty platforms emails.`

Create SECURITY.md 2021-08-19 09:32:57 +00:00			`## Supported Versions`

Fix some of markdownlint warnings 2021-10-13 00:01:34 +00:00			`### Uptime Kuma Versions`

Update SECURITY.md 2022-04-24 14:54:06 +00:00			You should use or upgrade to the latest version of Uptime Kuma. All `1.X.X` versions are upgradable to the lastest version.
Create SECURITY.md 2021-08-19 09:32:57 +00:00
Fix some of markdownlint warnings 2021-10-13 00:01:34 +00:00			`### Upgradable Docker Tags`

Update SECURITY.md 2021-10-10 04:20:15 +00:00			`\| Tag \| Supported \|`
			`\| ------- \| ------------------ \|`
			`\| 1 \| :white_check_mark: \|`
			`\| 1-debian \| :white_check_mark: \|`
			`\| latest \| :white_check_mark: \|`
			`\| debian \| :white_check_mark: \|`
Update SECURITY.md 2022-04-24 14:54:06 +00:00			`\| 1-alpine \| ⚠️ Deprecated \|`
			`\| alpine \| ⚠️ Deprecated \|`
Update SECURITY.md 2021-10-10 04:20:15 +00:00			`\| All other tags \| ❌ \|`