From 5e33f8a76bc9662df5ee2311b4a2155e48058ccf Mon Sep 17 00:00:00 2001 From: Even Stensberg Date: Mon, 27 May 2019 03:28:23 +0200 Subject: [PATCH 1/4] chore: add sec & versioning policy --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000000..ef1676b50d2 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +This document explains the security policy of webpack-cli and how we intend to support webpack and webpack-cli. + +## Supported Versions + +webpack CLI is currently supporting webpack v4 and webpack v5. Security fixes are released in patches. + +| webpack version | webpack-cli version | Supported | +| --------------- | ----------------------------- | ------------------ | +| 4.x.0 | ^3.1.2 | :white_check_mark: | +| 4.0.x | ^3.1.2 | :white_check_mark: | +| 5.x.0 | ^3.1.2 | :white_check_mark: | +| 5.0.x | ^3.1.2 | :white_check_mark: | +| < 4.x.x | (CLI included in webpack < 4) | :x: | + +**Note: Using webpack < 4 with webpack CLI is not required as CLI was [included](https://github.com/webpack/webpack/commit/4b0332d3909eea8115d84f9a03da2d52478daa70#diff-b9cfc7f2cdf78a7f4b91a753d10865a2) in webpack.** + +## Reporting a Vulnerability + +To report a vulnerability, please contact one of webpack maintainers through the email provided from either npm, GitHub or reach out at other social media platforms. For third party security vulnerabilities, submitting an issue or Pull Request to fix the security vulerability is much appreciated. From 90f397c7f136eda23969d00ea95d008e89ee580c Mon Sep 17 00:00:00 2001 From: ev1stensberg Date: Wed, 29 May 2019 10:00:06 +0200 Subject: [PATCH 2/4] chore: revise version support --- SECURITY.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index ef1676b50d2..3eb4961763c 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -8,8 +8,8 @@ webpack CLI is currently supporting webpack v4 and webpack v5. Security fixes ar | webpack version | webpack-cli version | Supported | | --------------- | ----------------------------- | ------------------ | -| 4.x.0 | ^3.1.2 | :white_check_mark: | -| 4.0.x | ^3.1.2 | :white_check_mark: | +| > 4.20.0 | ^3.1.2 | :white_check_mark: | +| 4.20.x | ^3.1.2 | :white_check_mark: | | 5.x.0 | ^3.1.2 | :white_check_mark: | | 5.0.x | ^3.1.2 | :white_check_mark: | | < 4.x.x | (CLI included in webpack < 4) | :x: | From 9cdc3570df687afd66eabe722e644e6537b8fc0b Mon Sep 17 00:00:00 2001 From: Even Stensberg Date: Wed, 29 May 2019 11:08:44 +0200 Subject: [PATCH 3/4] chore: revise SECURITY.md Co-Authored-By: Emanuele --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 3eb4961763c..833651fcd0b 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -8,7 +8,7 @@ webpack CLI is currently supporting webpack v4 and webpack v5. Security fixes ar | webpack version | webpack-cli version | Supported | | --------------- | ----------------------------- | ------------------ | -| > 4.20.0 | ^3.1.2 | :white_check_mark: | +| >= 4.20.x | ^3.1.2 | :white_check_mark: | | 4.20.x | ^3.1.2 | :white_check_mark: | | 5.x.0 | ^3.1.2 | :white_check_mark: | | 5.0.x | ^3.1.2 | :white_check_mark: | From 2a9e3048bc5ed3cff37dd8ad57eb1e36aafbbcc7 Mon Sep 17 00:00:00 2001 From: Even Stensberg Date: Wed, 29 May 2019 11:08:54 +0200 Subject: [PATCH 4/4] chore: revise SECURITY.md Co-Authored-By: Emanuele --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 833651fcd0b..c54aedcf910 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -9,7 +9,7 @@ webpack CLI is currently supporting webpack v4 and webpack v5. Security fixes ar | webpack version | webpack-cli version | Supported | | --------------- | ----------------------------- | ------------------ | | >= 4.20.x | ^3.1.2 | :white_check_mark: | -| 4.20.x | ^3.1.2 | :white_check_mark: | +| <= 4.19.x | ^3.1.1 | :white_check_mark: | | 5.x.0 | ^3.1.2 | :white_check_mark: | | 5.0.x | ^3.1.2 | :white_check_mark: | | < 4.x.x | (CLI included in webpack < 4) | :x: |