A responsible disclosure policy helps protect the project and its users from security vulnerabilities discovered in the project’s scope by employing a process where vulnerabilities are publicly disclosed after a reasonable time period to allow patching the vulnerability.

All security bugs are taken seriously and are considered as top priority. Your efforts to responsibly disclose your findings are appreciated and will be taken into account to acknowledge your contributions.

This versions of HospitalRun project are currently being supported with security updates.

Report security bugs by opening a new Security Issue. You can also report a vulnerability by emailing security@hospitalrun.io.

Report security bugs in third-party modules to the maintainer or team maintaining the module.