makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-07 20:08:53 +00:00
Code Issues Projects Releases Packages Wiki Activity

[ticket/17478] Add security policy file

Browse source 
PHPBB-17478
This commit is contained in:
Marc Alexander 2025-03-01 16:45:36 +01:00
parent a223da37fb
commit cedbbb0c76
No known key found for this signature in database
GPG key ID: 50E0D2423696F995
1 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
SECURITY.md Normal file
View file

@ -0,0 +1,24 @@
# Security Policy
## Supported Versions
Only phpBB 3.3 is currently supported. The table below lists provides an overview of phpBB versions and their current support state:
| Version | Supported | Comment |
|---------|--------------------|----------------------------------------------------------------------------------------------------|
| 4.0.x | :x: | Not released yet, still in development |
| 3.3.x | :white_check_mark: | Current stable release |
| 3.2.x | :x: | [End of Life (EoL) in Nov 2020](https://www.phpbb.com/community/viewtopic.php?t=2573411) |
| 3.1.x | :x: | [End of Life (EoL) in December 2017](https://www.phpbb.com/community/viewtopic.php?t=2453376) |
| 3.0.x | :x: | [End of Life (EoL) in November 2015](https://www.phpbb.com/community/viewtopic.php?f=14&t=2302466) |
| < 3.0 | :x: | [End of Life (EoL) in October 2008](https://www.phpbb.com/community/viewtopic.php?t=900655) |
## Reporting a Vulnerability
There are multiple ways a potential security vulnerability can be reported:
- HackerOne: [phpBB | Vulnerability Disclosure Program | HackerOne](https://hackerone.com/phpbb)
- Send an email: [security@phpbb.com](mailto:security@phpbb.com)
- Create a report in the security tracker: [Security Tracker](https://www.phpbb.com/security/)
Please provide as much detail as possible when reporting a vulnerability. You can expect to receive an update on your report within a few days. If the vulnerability is accepted, we will work on a fix and keep you informed of the progress. If the vulnerability is declined, we will provide an explanation.