Version | Supported |
---|---|
12.x | ✅ |
If you discover a security vulnerability in the Moment Date Utils package, please report it to us as soon as possible. We take security issues seriously and will respond promptly to any reported vulnerabilities.
To report a vulnerability, please follow these steps:
-
Email us at [email protected]:
- Include a detailed description of the vulnerability.
- Provide any relevant information that can help us reproduce and understand the issue.
- If possible, include proof of concept (PoC) code demonstrating the vulnerability.
-
Provide a timeline for public disclosure:
- Let us know your preferred timeline for when you believe the vulnerability should be publicly disclosed. We aim to resolve security issues as quickly as possible and will coordinate with you on an appropriate disclosure timeline.
Upon receiving a vulnerability report, we will:
- Acknowledge receipt of the report within 48 hours and provide a preliminary assessment of the report.
- Conduct a thorough investigation to verify and understand the vulnerability.
- Develop a fix for the vulnerability.
- Test the fix to ensure it resolves the issue without introducing new problems.
- Release the fix as part of a new version of Moment Date Utils.
- Coordinate with the reporter to disclose the vulnerability to the public in a responsible manner.
Security updates will be released as part of our regular versioning process. We recommend that all users keep their installations up-to-date to benefit from the latest security fixes and improvements.