Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.
Use one of the following private channels:
- GitHub private vulnerability reporting (preferred) — https://github.com/akquinet/powerdns-api-proxy/security/advisories/new
- Email — git@rwxd.de
Please include as much of the following as you can:
- A description of the vulnerability and its impact
- The affected version, release, or commit
- Steps to reproduce, or a proof of concept
- Any suggested fix or mitigation
- We will acknowledge your report within a few business days.
- We will assess the issue and keep you informed of our progress.
- We will credit you in the advisory unless you prefer to stay anonymous.
- Please give us a reasonable amount of time to release a fix before any public disclosure.
Only the latest released version is supported with security fixes.