Skip to content

Security: anvouk/lua-resty-jwt-verification

Security

SECURITY.md

Security Policy

Supported OpenResty/OpenSSL Versions

This library will officially support all the Openresty versions targeted in the tests.yml file.

Reporting a Vulnerability

This library is critical to the security of public-facing applications!

DO NOT open a public issue on GitHub describing a vulnerability. Contact me directly at andrew dot vouk at gmail dot com with a fairly detailed report of the vulnerability. I'll try to see to it as soon as possible.

DO NOT create a public CVE immediately: before going public, give me time to fix the issue and to allow users to safely update to the latest version (~30 days as minimum).

There aren't any published security advisories