dnscontrol/SECURITY.md
Andrew Imeson 6edfbf5078
DOCS: Remove reference to ppush/ppreview, spelling fixes (#3940)
<!--
## Before submiting a pull request

Please make sure you've run the following commands from the root
directory.

    bin/generate-all.sh

(this runs commands like "go generate", fixes formatting, and so on)

## Release changelog section

Help keep the release changelog clear by pre-naming the proper section
in the GitHub pull request title.

Some examples:
* CICD: Add required GHA permissions for goreleaser
* DOCS: Fixed providers with "contributor support" table
* ROUTE53: Allow R53_ALIAS records to enable target health evaluation

More examples/context can be found in the file .goreleaser.yml under the
'build' > 'changelog' key.
!-->
2025-12-22 23:52:34 -05:00

791 B

Security Policy

DNSControl is a command-line tool and therefore has a different (limited) attack surface as compared to a web app or other system.

Supported Versions

Only the most recent release is supported with security updates.

When a major version is incremented, we'll support the previous major version for 6 months. For example, when v4.0 is released, we will support the most recent v3.x release for 6 months.

Reporting a Vulnerability

To report a vulnerability please create a new GitHub "issue".

We will respond in a best-effort manner, usually within 1 week. We will communicate via the GitHub issue unless we need to communicate privately, in which case we'll arrange a way to communicate directly.