Report a vulnerability
How to report a security vulnerability in the InfraFence agent, the dashboard or the panel plugins, responsibly and privately.
Last updated:
If you find a security vulnerability in InfraFence (the agent, the dashboard at infrafence.com or the panel plugins), please report it privately:
- Do not open a public GitHub issue.
- Email info@infrafence.com with the details, and the steps to reproduce it if you can.
- We answer within 48 hours.
We appreciate responsible disclosure and, with your permission, credit reporters in the release notes.
The contact is also published in security.txt, in English and Italian. The policy is in SECURITY.md.
Supported versions
| Version | Supported |
|---|---|
| Latest release | Yes |
| Previous minor | Security fixes only |
| Older | No |
Keep agents on the latest version: see Updating the agent.