# Security Policy

## How To Report a Vulnerability

If you think you have found a vulnerability in this repository, please report it to us through coordinated disclosure.

**Please do not report security vulnerabilities through public issues, discussions, or change requests.**

Instead, report it using one of the following ways:

- Contact the [F3D maintainers](mailto:contact@f3d.app) via email

Please include as much of the information listed below as you can to help us better understand and resolve the issue:

- The type of issue (e.g., buffer overflow, IO manipulation, or cross-site scripting)
- Affected version(s)
- Impact of the issue, including how an attacker might exploit the issue
- Step-by-step instructions to reproduce the issue
- The location of the affected source code (tag/branch/commit or direct URL)
- Full paths of source file(s) related to the manifestation of the issue
- Configuration required to reproduce the issue
- Log files that are related to this issue (if possible)
- Proof-of-concept or exploit code (if possible)

This information will help us triage your report more quickly.

## Supported Versions

The only supported version is the last full release.
It can be found in [github release page](https://github.com/f3d-app/f3d/releases).

## Acknowledgements

This file was copied and modified from eclipse-csi\security-handbook.
Copyright 2024 the Eclipse Foundation and others. Code released under the Eclipse Public License Version 2.0 (EPL-2.0).
