This organization-wide policy applies to actively maintained DeepFurry projects.
Individual repositories may provide their own SECURITY.md with project-specific supported versions or reporting instructions. When they do, the repository-specific policy takes precedence.
Archived or end-of-life projects may no longer receive security updates.
Please do not report security vulnerabilities through public GitHub issues, pull requests, discussions, or other public channels.
Use one of the following private reporting methods:
- If the affected repository has GitHub Private Vulnerability Reporting enabled, use Security → Report a vulnerability in that repository.
- Otherwise, email faolanthewooolf@gmail.com.
Please include as much of the following information as possible:
- Affected project and version or commit
- Description of the vulnerability
- Steps to reproduce or proof of concept
- Potential security impact
- Suggested mitigation or fix, if available
- Any relevant logs, screenshots, or technical details
We will review reports and work to understand their impact.
If a vulnerability is confirmed, we may coordinate a fix and disclosure through GitHub Security Advisories or other appropriate channels.
We ask reporters to give us a reasonable opportunity to investigate and address the issue before public disclosure.
We welcome good-faith security research.
Please avoid:
- Accessing, modifying, or exposing data that does not belong to you
- Destructive testing or intentional service disruption
- Social engineering, phishing, or physical attacks
- Publicly disclosing an unresolved vulnerability before reasonable coordination
DeepFurry does not currently operate a vulnerability reward or bug bounty program unless explicitly stated by an individual project.
For non-security bugs and feature requests, please use the repository's public GitHub Issues.
For community conduct concerns, see our Code of Conduct.
This document may be translated into other languages.
If there is any inconsistency between translations, the English version takes precedence.
Thank you for helping keep DeepFurry and its users secure.