Skip to content

Security: tshivaneshk/orge

Security

SECURITY.md

Security Policy

Supported Versions

The following versions of ORGE are currently supported with security updates:

Version Supported
2.0.x Yes
< 2.0.0 No

Reporting a Vulnerability

The ORGE team takes file safety, security, and integrity very seriously. Because ORGE directly interacts with the filesystem:

  • Never report security vulnerabilities through public GitHub issues.
  • Please email vulnerability reports privately to the project maintainers or open a draft GitHub Security Advisory.

Please include:

  1. Detailed description of the vulnerability (e.g., path traversal, collision edge case, or privilege bypass).
  2. Steps to reproduce the issue.
  3. Operating system and environment details.
  4. Proof-of-concept scripts or filesystem setups.

We will review, acknowledge, and resolve security reports promptly before any public disclosure.

There aren't any published security advisories