At Lilypad Network, we take security very seriously. If you believe you have found a security vulnerability in our project, we appreciate your efforts to responsibly disclose it to us.
-
Contact Information:
- Please email your findings to our security team at [email protected].
- Include the phrase "Lilypad Network Security Vulnerability" in the subject line.
-
Information to Include:
- Detailed description of the vulnerability.
- Steps to reproduce the vulnerability.
- Potential impact of the vulnerability.
- Any possible mitigation or fix you have identified.
-
Public Disclosure:
- Do not disclose the vulnerability publicly or to any third parties before we have had a chance to investigate and address it.
- You will receive a confirmation of your report within 48 hours.
- Our security team will review your report and may reach out for additional information.
- We aim to resolve and patch confirmed vulnerabilities within a reasonable time frame, depending on the complexity and impact of the issue.
- Once the vulnerability is fixed, we will acknowledge your contribution in our release notes (if desired).
We are grateful to the security community and individual researchers who take the time to responsibly report security vulnerabilities. Your efforts help us ensure that Lilypad Network remains secure for all users.
This security policy applies to the Lilypad Network repository and all related code and services under our management. For vulnerabilities related to third-party dependencies, please report them to the respective maintainers.
Thank you for helping to keep Lilypad Network secure. Your contributions are invaluable to the health and safety of our community.
If you have any questions or need further assistance, please don't hesitate to contact us at [email protected].