ainur/metube
1
0
Fork 0
mirror of https://github.com/alexta69/metube.git synced 2026-07-23 13:22:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: add SECURITY.md (private vulnerability reporting)

Browse Source 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Alex Shnitman
2026-07-18 09:24:04 +03:00
parent 4b05022b91
commit a23d1689e3
1 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SECURITY.md
+24
View File
@@ -0,0 +1,24 @@
# Security Policy
## Reporting a vulnerability
Please report vulnerabilities privately via
[GitHub private vulnerability reporting](https://github.com/alexta69/metube/security/advisories/new)
(Security tab → "Report a vulnerability"). Do **not** open a public issue for
security problems.
You can expect an initial response within a few days. Please include a
reproduction and the MeTube release version (visible in the UI footer).
## Supported versions
MeTube is continuously released; only the **latest release** is supported.
Update to the current Docker image before reporting.
## Scope notes
MeTube ships **without authentication by design** — it is intended to run on a
trusted network or behind an authenticating reverse proxy (see the
[wiki](https://github.com/alexta69/metube/wiki/Reverse-proxy-configurations)).
Reports that reduce to "the UI is reachable without a login" are expected
behavior, not vulnerabilities.