Skip to content

Repository navigation

Security: Metron-Project/izaya

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Security fixes are made for the latest release of izaya.

Reporting a Vulnerability

Please don't report security problems in a public issue. Use GitHub's private vulnerability reporting instead, and include the steps to reproduce the problem and the izaya and Django versions affected.

Protecting Private Data

Search endpoints are public unless IZAYA_LOGIN_REQUIRED or a lookup's has_access says otherwise, and a per-user get_queryset doesn't limit what a form accepts or renders. See Private data in the README for how to restrict a lookup and its form field.

There aren't any published security advisories