We are committed to ensuring the security of the Log User Extractor project. Below are the versions of the project that are currently supported with security updates.
Version | Supported |
---|---|
1.x | ✅ |
< 1.0 | ❌ |
If you discover a security vulnerability within the Log User Extractor project, please follow the steps below:
-
Email us directly at: harsimransidhu770@gmail.com
- Please do not file a public issue on GitHub, as this may disclose the vulnerability to others before we have a chance to address it.
-
Include the following details in your email:
- A detailed description of the vulnerability.
- Steps to reproduce the vulnerability.
- Potential impact of the vulnerability.
- Any other relevant information that will help us understand and address the issue quickly.
We will respond to vulnerability reports as quickly as possible and will provide a timeframe for the resolution of the issue. Once the vulnerability is confirmed, we will take the following actions:
-
Acknowledgment:
- We will acknowledge the receipt of your report within 48 hours.
-
Investigation:
- We will investigate the vulnerability and determine its impact.
-
Fix:
- We will develop a fix for the vulnerability and will aim to release the fix within 7-14 days, depending on the severity and complexity of the issue.
-
Notification:
- We will notify the reporter when the fix is available, and we will provide credit to the reporter if they wish to be publicly acknowledged.
-
Public Disclosure:
- We will publicly disclose the details of the vulnerability and the fix once the issue has been resolved and the fix has been released.
To help ensure the security of your deployment, please follow these best practices:
-
Keep your software up to date:
- Regularly update the Log User Extractor project to the latest version to ensure you have the latest security patches.
-
Review and audit code:
- Regularly review and audit the codebase for any potential security vulnerabilities.
-
Use secure configurations:
- Ensure that all configurations are securely set up, and avoid using default or weak passwords.
If you have any questions or concerns about the security of the Log User Extractor project, please contact us at harsimransidhu770@gmail.com.
Thank you for helping to keep Log User Extractor secure!