admin/mruby-mruby
1
0
Fork 0
mirror of https://github.com/mruby/mruby synced 2026-06-08 16:11:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

SECURITY.md: add scope description.

Browse Source
This commit is contained in:
Yukihiro "Matz" Matsumoto
2021-10-01 19:13:07 +09:00
parent d96f53f8f8
commit 4e504eaca1
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SECURITY.md
+13
View File
@@ -3,3 +3,16 @@
## Reporting a Vulnerability
If you have any security concern, contact <matz@ruby.or.jp>.
## Scope
We consider following issues as vulnerabilities:
* Remote code execution
* Crash caused by a valid Ruby script
We *don't* consider following issues as vulnerabilities:
* Runtime C undefined behavior (including integer overflow)
* Crash caused by misused API
* Crash caused by tweaked compiled binary