Use GitHub for vulnerability reporting (#15555)

RIP huntr.dev
This commit is contained in:
Tony Murray 2023-11-07 07:17:16 -06:00 committed by GitHub
parent 489978a923
commit a3acde8bfe
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -5,7 +5,7 @@
Only the most recent monthly release and daily release recieve security updates. Only the most recent monthly release and daily release recieve security updates.
LibreNMS is supported by volunteers, they all do their best to keep LibreNMS secure. LibreNMS is supported by volunteers, they all do their best to keep LibreNMS secure.
## Reporting a Vulnerability ## Finding a Vulnerability
Like anyone, we appreciate the work people put in to find flaws in Like anyone, we appreciate the work people put in to find flaws in
software and welcome anyone to do so with LibreNMS, this will lead to software and welcome anyone to do so with LibreNMS, this will lead to
@ -20,9 +20,8 @@ We are happy to attribute credit to the findings, but we ask that we're
given a chance to patch any vulnerability before public disclosure so given a chance to patch any vulnerability before public disclosure so
that our users can update as soon as a fix is available. that our users can update as soon as a fix is available.
# Reporting a Vulnerability # Reporting a Vulnerability
If you discover a security vulnerability in librenms please disclose it via [our huntr page](https://huntr.dev/repos/librenms/librenms/). Bounty eligibility, CVE assignment, response times and past reports are all there. If you discover a security vulnerability in librenms please disclose it via our [GitHub Security Advisories Page](https://github.com/librenms/librenms/security/advisories/new).
Thank you for improving the security of librenms. Thank you for improving the security of librenms.