pengjunjie/langflow
1
0
Fork 1
mirror of https://github.com/langflow-ai/langflow.git synced 2026-07-23 17:31:33 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
v1.11.0.dev21
langflow/SECURITY.md
Mendon Kissling 96c9035fc6 docs: point security reports to hackerone (#12368) 
* use-hackerone-and-remove-cve-list

* link-to-ibm-hackerone

* add-release-note

* typo
2026-04-02 01:42:03 +00:00

1.0 KiB
Raw Permalink Blame History

Langflow Security Policy & Responsible Disclosure

This security policy applies to all public projects under the langflow-ai organization on GitHub. We prioritize security and continuously work to safeguard our systems. However, vulnerabilities can still exist. If you identify a security issue, please report it to us so we can address it promptly.

Security/Bugfix Versions

  • Fixes are released either as part of the next minor version (e.g., 1.3.0 → 1.4.0) or as an on-demand patch version (e.g., 1.3.0 → 1.3.1).
  • Security fixes are given priority and might be enough to cause a new version to be released.

Report a vulnerability

Please do not report security vulnerabilities through public GitHub issues or GitHub security advisories. To report a vulnerability, submit a report on HackerOne. Include a clear description of the issue, steps to reproduce, the Langflow version, and any known or suggested mitigations. Our team aims to respond to all new vulnerability reports within 7 business days.