diff --git a/.github/SECURITY.md b/.github/SECURITY.md index b4c9144b..0c746186 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -4,10 +4,18 @@ | Version | Supported | | ------- | ------------------ | -| 0.1.x | :x: | -| 0.2.x | :white_check_mark: | +| 1.0.x | :x: | +| 2.0.x | :x: | +| 3.0.x | :white_check_mark: | +| 4.0.x | :white_check_mark: | ## Reporting a Vulnerability -Please report all security issues [here](https://github.com/ajinabraham/njsscan/issues) or email ajin25(gmail). We believe in coordinated and responsible disclosure. +Please report all security issues [here](https://github.com/MobSF/Mobile-Security-Framework-MobSF/issues) or email ajin25(gmail). We believe in coordinated and responsible disclosure. + +## Past Security Issues + +* [Local file reading regression < 3.0.0](https://github.com/MobSF/Mobile-Security-Framework-MobSF/issues/1197) +* [Upload a malicious zip file can overwrite arbitary files >=v0.9.3.2 && <=0.9.4.1](https://github.com/MobSF/Mobile-Security-Framework-MobSF/issues/358) +* [Fix Local File Inclusion Vulnerability in ViewSource Function. Version <= v0.9.2](https://github.com/MobSF/Mobile-Security-Framework-MobSF/pull/166)