Skip to content

Security: kimai/kimai

SECURITY.md

Security Policy

Supported Versions

As announced in the README I only support the latest available release and main branch.

Version Supported
main branch
latest minor release
older releases

Reporting a Vulnerability

Please read the Bughunter documentation before posting. You can report any security related vulnerability in the advisory section at GitHub or via email to support@kimai.org.

I will work as fast as I can to fix the problem and publish a bugfix release / security update. Depending on the size of the required fixes, this might take a couple of hours or a couple of days.

You can expect that your message will be answered ASAP.

You will be mentioned in the release notes if your issue is valid. I am grateful for any (discrete) disclosure of vulnerabilities!

Please note: if you are asking for money, I will not reply. I receive these scam messages every day...

Learn more about advisories related to kimai/kimai in the GitHub Advisory Database