Skip to content

Security: IntellectualSites/bom

SECURITY.md

Reporting Security Vulnerabilities

Please report security vulnerabilities through the "Security" tab on GitHub.

Therefore, click on the "Security" button:

Now, click on "Report a vulnerability":

In the form, add a "Title" summing the vulnerability up.

In the "Description" field, provide as much information about the vulnerability, including:

  • The output of /version
  • The URL of a /plot debugpaste or /fawe debugpaste, if the vulnerability is within one of our plugins.
  • Steps to replicate the issue
  • Error logs and stack traces, if applicable

Leave everything else at the bottom of the page, below the "Description" box, empty. Project maintainers will fill it out for you.

To submit the report, click on "Submit report":

The form is configured in such a way that only the reporter and the IntellectualSites project maintainers can see the details. By restricting access to this potentially sensitive information, we can work on a fix and deliver it, before a vulnerability becomes well known.

Issue Handling

If you have submitted a properly filled out report, the project maintainers will look into your issue shortly.
Keep in mind, that we may choose to reject issues, if they are not feasible for us to address, due to limitations of the Minecraft codebase.

Attribution policy

We will credit reporters who informed us in private by filling out the form above in security releases published.

There aren’t any published security advisories