mirror of
https://github.com/SrIzan10/next-auth.git
synced 2026-05-01 10:55:20 +00:00
cb56cd44ca
* docs: beta initial commit * docs(oauth): finish initial tutorial * docs(oauth-tutorial): finish guide * docs(docusaurus): just log broken links * docs: re-organising beta * docs(beta): sort documents for sorting * docs: more re-structure * docs: more re-structure (2) * fix: more WIP * fix: more WIP * chore: more updates * chore: wip * chore: wip * fix lock file * docs(getting-started): credentials * chore: remove json-server file * chore: cleanup * remove mongodb from dev app * chore: cleanup * revert * chore: cleanup * chore: more cleanup changes Co-authored-by: Balázs Orbán <info@balazsorban.com>
27 lines
1.3 KiB
Markdown
27 lines
1.3 KiB
Markdown
# Security
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
NextAuth.js practices responsible disclosure.
|
|
|
|
We request that you contact us directly to report serious issues that might impact the security of sites using NextAuth.js.
|
|
|
|
If you contact us regarding a serious issue:
|
|
|
|
- We will endeavor to get back to you within 72 hours.
|
|
- We will aim to publish a fix within 30 days.
|
|
- We will disclose the issue (and credit you, with your consent) once a fix to resolve the issue has been released.
|
|
- If 90 days has elapsed and we still don't have a fix, we will disclose the issue publicly.
|
|
|
|
The best way to report an issue is by contacting us via email at info@balazsorban.com or me@iaincollins.com and yo@ndo.dev, or raise a public issue requesting someone get in touch with you via whatever means you prefer for more details. (Please do not disclose sensitive details publicly at this stage.)
|
|
|
|
:::note
|
|
For less serious issues (e.g. RFC compliance for unsupported flows or potential issues that may cause a problem in the future) it is appropriate to make these public as bug reports or feature requests or to raise a question to open a discussion around them.
|
|
:::
|
|
|
|
## Supported Versions
|
|
|
|
Security updates are only released for the current version.
|
|
|
|
Old releases are not maintained and do not receive updates.
|