SECURITY.md

The following document will redact the definition of vulnerability, how to properly report a vulnerability to the developer team and how the developer team will deal with this vulnerability.

A vulnerability, also known as exploit, can be defined as a bug in the software that allows users to cause unwanted behavior with it. Depending on the degree of access it gives, a vulnerability can risk the integrity of both the client and server, along with the sensible information they both contain.

It's good to note crashing the server is not considered a vulnerability by itself so, as long as it's directly related to this addon's actions, it can bereported as a bug.

Due to the risk it poses, a vulnerability should be reported directly to the developer team. We highly suggest you to contact any of the developer team members directly via private messages. You can find them on theDiscord server.

The process of fixing the vulnerability will be kept private by the developer team. As the person who found this vulnerability, we expect the same from you. You'll be contacted when the fix is complete and merged with the rest of the repository.

There aren’t any published security advisories