Reporting a Bug

Email security@islandora.ca

Please read the Disclosure Policy

All security bugs in Islandora are taken seriously and should be reported by emailing security@islandora.ca. This will be delivered to the Islandora Security Response Team (ISRT) who handle security issues.

Your email will be acknowledged within two business days indicating the next steps in handling your report.

Security bugs in third party modules should be reported to their respective maintainers and can also be coordinated through the Islandora Security Interest Group.

Thank you for improving the security of Islandora. Your efforts and responsible disclosure are greatly appreciated and will be acknowledged.

Comments on this Process

If you have suggestions on how this process could be improved please email security@islandora.ca to discuss.