2021-05-24 05:50:45 +09:00
|
|
|
# Reporting Security Issues
|
|
|
|
|
|
2023-12-25 16:50:41 +09:00
|
|
|
If you discover a security issue in Misskey, please report it by **[this form](https://github.com/misskey-dev/misskey/security/advisories/new)**.
|
2021-05-24 05:50:45 +09:00
|
|
|
|
|
|
|
|
This will allow us to assess the risk, and make a fix available before we add a
|
|
|
|
|
bug report to the GitHub repository.
|
|
|
|
|
|
2022-09-15 20:32:25 +09:00
|
|
|
CherryPick shares security fixes with Misskey.
|
|
|
|
|
|
2021-05-24 05:50:45 +09:00
|
|
|
Thanks for helping make Misskey safe for everyone.
|
2024-11-17 17:35:27 +09:00
|
|
|
|
|
|
|
|
## When create a patch
|
|
|
|
|
|
|
|
|
|
If you can also create a patch to fix the vulnerability, please create a PR on the private fork.
|
|
|
|
|
|
|
|
|
|
> [!note]
|
|
|
|
|
> There is a GitHub bug that prevents merging if a PR not following the develop branch of upstream, so please keep follow the develop branch.
|
