One of the main goals of the Sliver project is to provide a secure platform when performing assessments, we encourage everyone to do a security review of the code base and report vulnerabilities, or to request features if the project does not meet your security needs.
Anything in the master
branch, without an open ticket.
Severity | Reward |
---|---|
Critical | 12+ Year Whisky or Scotch |
High | Good Beer |
Medium | A PBR, Grain Belt, or Hamm's |
Low | High Five |
Please report high and/or critical vulnerabilities via email jdemesy<[a]>bishopfox.com
, if no response within 14 days, file a ticket with a security
tag. Medium to Low risk vulnerabilities can simply be filed as a normal bug/issue with the security
tag.