Security Policy

Auto-generate your docs

Supported Versions

The OWASP Nest project follows a rolling release model. Only the latest version on the main branch is actively supported with security updates.

If you discover a security vulnerability in OWASP Nest, please report it responsibly.

Please use the GitHub Security Advisory form to report a security vulnerability.Do not create public GitHub issues for security-related reports.

When reporting a vulnerability, please include:

We are committed to responding to security reports in a timely manner:

Initial Acknowledgment

Within 10 days of receiving your report

Investigation and Validation

Within 30 days depending on the issue severity

Fix and Coordinated Disclosure

Within 90 days after investigation and validation

Thank you for helping keep OWASP Nest and the community secure.

⌘I