mirror of
https://github.com/google/security-research
synced 2026-06-08 14:27:23 +00:00
Eduardo' Vela" Nava (sirdarckcat)
38 lines
1.2 KiB
Markdown
38 lines
1.2 KiB
Markdown
# Security Research
|
|
|
|
This project hosts security advisories and their accompanying
|
|
proof-of-concepts related to research conducted at Google which impact
|
|
non-Google owned code.
|
|
|
|
We believe that vulnerability disclosure is a two-way street. Vendors,
|
|
as well as researchers, must act responsibly. This is why Google adheres
|
|
to a 90-day disclosure deadline. We notify vendors of vulnerabilities
|
|
immediately, with details shared in public with the defensive community
|
|
after 90 days, or sooner if the vendor releases a fix.
|
|
|
|
You can read up on our full policy at:
|
|
https://www.google.com/about/appsecurity/.
|
|
|
|
## Advisories
|
|
|
|
The disclosure of vulnerabilities are all in the form of security
|
|
advisories, which can be browsed in the [Security
|
|
Advisories](https://github.com/google/security-research/security/advisories?state=published)
|
|
page.
|
|
|
|
# License & Patents
|
|
|
|
The advisories and patches posted here are free and open source.
|
|
|
|
See [LICENSE](https://github.com/google/security-research/blob/master/LICENSE) for
|
|
further details.
|
|
|
|
# Contributing
|
|
|
|
The easiest way to contribute to our security research projects is to
|
|
correct the patches when you see mistakes.
|
|
|
|
Please read up our
|
|
[Contribution](https://github.com/google/security-research/blob/master/CONTRIBUTING.md)
|
|
policy.
|