Skip to content

Security: HyScript7/projectfusion-warpzones

Security

SECURITY.md

Security Policy

Supported Versions

This project follows the Minecraft and Paper ecosystem. In general, only the latest main branch and its most recent release are supported.

Reporting a Vulnerability

If you believe you have found a security vulnerability in ProjectFusion Warpzones:

  1. Do not open a public issue with exploit details.
  2. Instead, use one of the following channels:
    • Open a private security advisory on GitHub for the HyScript7/projectfusion-warpzones repository.
    • Or open a GitHub issue with a short description and "Security" in the title, omitting sensitive details; we will follow up privately.
  3. Include as much information as you can safely share:
    • A clear description of the issue and potential impact.
    • Steps to reproduce, preferably against a clean Paper server.
    • Any logs or stack traces that help diagnose the problem.

We aim to:

  • Acknowledge reports within a reasonable timeframe.
  • Investigate and, where appropriate, release a fix.
  • Credit reporters in release notes if desired.

Public Disclosure

Please give us a reasonable chance to investigate and release a fix before publicly disclosing details of a security issue that could impact server operators.

There aren’t any published security advisories