Kurozora takes the security of our software and services (collectively, the "Software") seriously.
If you believe you have found a security vulnerability in any Kurozora owned repository, please report it to us as described below.
Only the latest version of the Software will be supported with security updates.
If you happen to find a security vulnerability, we would appreciate you letting us know at kurozoraapp@gmail.com or by on the Kurozora Discord Server, and allowing us to respond before disclosing the issue publicly.
Please include the requested information listed below to help us better understand the nature and scope of the possible issue:
- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
- Full paths of source file(s) related to the manifestation of the issue
- The location of the affected source code (tag/branch/commit or direct URL)
- Any special configuration required to reproduce the issue
- Step-by-step instructions to reproduce the issue
- Proof-of-concept or exploit code (if possible)
- Impact of the issue, including how an attacker might exploit the issue
This information will help us triage your report more quickly.
You will receive a response from us within 72 hours. Once the issue is confirmed, we will release a patch as soon as possible.
We prefer all communications to be in English.