Projects/docs/SECURITY.md

Security Policy

Supported Versions

Use this section to tell people about which versions of your project are currently being supported with security updates.

Version	Supported
2.0.x	:white_check_mark:
1.0.x	:x:

Reporting a Vulnerability

Security is a top priority for the Research Platform 2.0. If you discover a vulnerability, we would like to know about it so we can take steps to address it as quickly as possible.

We ask that you do not report security vulnerabilities via public GitHub issues.

Instead, please report them to our security team via email at security@research-platform.edu. We will acknowledge receipt of your vulnerability report the next business day and strive to send you regular updates about our progress.

When reporting a vulnerability, please include:

• The type of vulnerability (e.g. XSS, SQLi, SSRF)
• The location (e.g. API endpoint, frontend page)
• Step-by-step instructions on how to reproduce the issue
• Any potential impact or exposure

Thank you for helping keep the Research Platform secure!