Thank you for your interest in improving the security of
YAIDS. We appreciate your efforts and responsible disclosure!
YAIDS is currently distributed via rolling-releases; ensure you stay up to date with the yaids/main branch. However, YAIDS is versioned, and older versions may not receive backported updates.
Currently, the following versions are maintained:
|0.0.X||NO||Compatable with 4.0.X, please upgrade|
Upstream vulnerabilities or security issues should be reported to the relevant project:
If an upstream vulnerability impacts the security of YAIDS, please submit a Bug Report for notification purposes.
If the security flaw does not result in Remote Code Execution please submit your request via a Bug Report.
This public reporting should only apply when the only impact of the vulnerability is the stoppage of YAIDS execution, not in cases where process flow (or memory) is controllable. For example, a double free should be filed as an issue, whereas a buffer overflow should not.
In cases where the security flaw results in Remote Code Execution, or other similar control of the process, memory, or system, please submit your report via email: email@example.com
[YAIDS SECURITY] at the beginning of your email subject. The report should include the same level of detail as requested in a Bug Report, including full details and information about the vulnerability.
Issues, such as theoretical flaws, standards compliance, code quality, etc., should be reported as either a Feature Request or Bug Report.
Your security submission may result in an advisory or update. For non-public submission, please include information on if and how you would like to be credited for the report.
Please read abour the testing, including security testing that is conducted on the YAIDS code: Code Testing. This information is also avaliable within the README.
Although security is essential, it is equally important to remember that YAIDS is provided AS-IS, without any warranty. Support, security, or otherwise, is not guaranteed.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.