This document outlines the security policy for rshell and what to do if you discover a security vulnerability in the project. Please do not share vulnerability details in a public forum, including GitHub discussions, issues, or pull requests. Report them privately so Datadog can investigate, coordinate remediation, and publish details after an appropriate disclosure period.
Datadog recommends using the latest released version of rshell. Security advisories for rshell identify affected versions and patched versions when a vulnerability is disclosed.
If you discover a vulnerability in rshell, or any Datadog product, please submit details to the following email address:
Please include the affected rshell version or commit, reproduction steps, expected impact, and any relevant proof-of-concept details.
Datadog follows a coordinated disclosure process for confirmed vulnerabilities. When public disclosure is appropriate, Datadog publishes a GitHub Security Advisory for this repository so users can find vulnerability history from the repository's Security tab.