Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it by sending an email to shiny.brar@nrc-cnrc.gc.ca.

We will respond as quickly as possible to address the issue.

Security Updates

We will make security updates available as soon as they are ready. Please ensure you are using the latest version of the project to benefit from these updates.

Acknowledgments

We appreciate the efforts of the community in helping us improve the security of this project.

Security

Please report security vulnerabilities privately rather than opening a public issue. Email shiny.brar@nrc-cnrc.gc.ca with a description, affected version, reproduction steps, and any relevant logs or proof of concept. Do not include secrets or personal data in the report.

We will acknowledge reports and coordinate a fix and disclosure timeline. Keep CANFAR and its dependencies up to date while a report is being assessed.

See the repository's security policy for the canonical contact and policy text.