We provide security updates for the following versions:
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
| < 0.1 | ❌ |
If you discover a security vulnerability in Journeys & Jamborees, please report it responsibly:
- Do not create a public GitHub issue for security vulnerabilities
- Email security details to: rayners@gmail.com
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
- Initial Response: Within 48 hours
- Status Updates: Every 5 business days
- Resolution Timeline: Varies by severity
- Critical: 1-7 days
- High: 1-4 weeks
- Medium/Low: 1-3 months
This module handles:
- Actor data and permissions
- User-generated content in party notes
- Module settings and configurations
Common security concerns:
- Cross-site scripting (XSS) in user inputs
- Permission bypasses
- Data exposure between users
Thank you for helping keep Journeys & Jamborees secure!