File: SECURITY.md

package info (click to toggle)
satpy 0.59.0-3
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 39,292 kB
  • sloc: python: 93,630; xml: 3,343; makefile: 143; javascript: 23
file content (24 lines) | stat: -rw-r--r-- 982 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# Security Policy

## Supported Versions

Satpy is currently pre-1.0 and includes a lot of changes in every release. As such we can't
guarantee that releases before 1.0 will see security updates except for the most recent
release. After 1.0, you can expect more stability in the interfaces and security fixes to be
backported more regularly.

| Version | Supported          |
| ------- | ------------------ |
| 0.x.x (latest)   | :white_check_mark: |
| < 0.33.0   | :x:                |

## Unsafe YAML Loading

Satpy allows for unsafe loading of YAML configuration files. Any YAML files
from untrusted sources should be sanitized of possibly malicious code.

## Reporting a Vulnerability

Do you think you've found a security vulnerability or issue in this project? Let us know by sending
an email to the maintainers at `pytroll-security@groups.io`. Please include as much information on
the issue as possible like code examples, documentation on the issue in other packages, etc.