If you discover a security vulnerability in Publite.me, please report it to us immediately. Here's how:
- Do not create a public issue for security vulnerabilities
- Email your findings to security@publite.me
- Include detailed information about the vulnerability:
- Steps to reproduce
- Potential impact
- Suggested fix (if available)
- We will acknowledge receipt of your report within 48 hours
- We will respond to security reports promptly
- We will keep you informed about the progress of fixing the vulnerability
- We will credit you for your discovery (unless you prefer to remain anonymous)
- We will publish security advisories for resolved vulnerabilities
- Triage: We will verify and assess the reported vulnerability
- Fix Development: We will develop and test a fix
- Release: We will release a patched version
- Disclosure: We will publish a security advisory
To ensure the security of your Publite.me installation:
- Keep your installation up to date
- Use strong, unique passwords for the admin account
- Regularly back up your database
- Run the application in a secure environment
- Review and update your environment variables regularly
For security-related issues, please contact us at security@publite.me
Thank you for helping keep Publite.me secure!