diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..2a75143 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,40 @@ +# Security Policy + +## Supported Versions + +We actively maintain security updates for the following versions (Since the 1.3.0 the application auto-update, patch will be apply easily): + +| Version | Supported | +| -------- | ----------------- | +| 1.3.x | :white_check_mark: | +| 1.2.x | :white_check_mark: | +| 1.1.x | :white_check_mark:| +| <1.1 | :white_check_mark: | + +> Only versions marked with ✅ receive security updates. Older versions may be vulnerable. + +--- + +## Reporting a Vulnerability + +If you discover a security vulnerability in Freedom Loader, **do not create a public issue**. Report it privately: + +- Email: **masteracnolo25@gmail.com** +- Include: + - Description of the vulnerability + - Steps to reproduce it + - App version and environment (OS, Node, Browser if relevant) + - Logs or screenshots if possible (`C:\Users\[USERNAME]\AppData\Local\FreedomLoader\logs\LOGS-20xx-xx-xx.log`) + +We will respond as quickly as possible, typically within **48 hours**, and keep you updated on the fix. + +We may acknowledge responsible disclosures in release notes unless you request anonymity. + +--- + +## What Happens Next + +- We will confirm receipt of your report +- Investigate and reproduce the issue +- Deploy a fix and release an update +- Notify you when the fix is live