Details
-
Task
-
Status: Resolved
-
Blocker
-
Resolution: Done
-
None
-
None
-
None
Description
The Guacamole website does not currently document the correct procedures for reporting security vulnerabilities (email the private@ list). This hasn't been an issue yet, as no such vulnerabilities have been reported, but there have been at least a couple incidents where a user believed that they found something security-related and announced this finding on the public lists.
We need to properly document this before it becomes a problem.