exlim/cyberchef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security Policy Update (#2547)

Browse Source
This commit is contained in:
GCHQ Developer 85297 2026-06-11 11:36:01 +01:00 committed by GitHub
parent 4bd609a5ee
commit 9d43334429
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 9 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
SECURITY.md
View File

@ -2,25 +2,15 @@
## Supported Versions ## Supported Versions
CyberChef is supported on a best endeavours basis. Patches will be applied to CyberChef is supported on a best endeavours basis.
the latest version rather than retroactively to older versions. To ensure you Patches will be applied to the latest version rather than retroactively to older versions.
are using the most secure version of CyberChef, please make sure you have the To ensure you are using the most secure version of CyberChef, please make sure you have the [latest release](https://github.com/gchq/CyberChef/releases/latest). [The official website](https://gchq.github.io/CyberChef/) is always up to date.
[latest release](https://github.com/gchq/CyberChef/releases/latest). The
official [live demo](https://gchq.github.io/CyberChef/) is always up to date.
## Reporting a Vulnerability ## Reporting a Vulnerability
In most scenarios, the most appropriate way to report a vulnerability is to If you discover a vulnerability in CyberChef, please do not publicly disclose it, and do not create a GitHub issue.
[raise a new issue](https://github.com/gchq/CyberChef/issues/new/choose)
describing the problem in as much detail as possible, ideally with examples.
This will obviously be public. If you feel that the vulnerability is
significant enough to warrant a private disclosure, please email
[oss@gchq.gov.uk](mailto:oss@gchq.gov.uk) and
[n1474335@gmail.com](mailto:n1474335@gmail.com).
Disclosures of vulnerabilities in CyberChef are always welcomed. Whilst we aim Instead, send an email as soon as possible to [CyberChefSecurity@gchq.gov.uk](mailto:CyberChefSecurity@gchq.gov.uk).
to write clean and secure code free from bugs, we recognise that this is an open The report will be acknowledged and actioned urgently by the CyberChef maintainers.
source project written by analysts in their spare time, relying on dozens of
open source libraries that are modified and updated on a regular basis. We hope If you do not receive a timely acknowledgement, please notify [oss@gchq.gov.uk](mailto:oss@gchq.gov.uk) and [CyberChef@gchq.gov.uk](mailto:CyberChef@gchq.gov.uk) of your vulnerability report.
that the community will continue to support us as we endeavour to maintain and
develop this tool together.

2
package.json
View File

@ -2,7 +2,7 @@
"name": "cyberchef", "name": "cyberchef",
"version": "11.0.0", "version": "11.0.0",
"description": "The Cyber Swiss Army Knife for encryption, encoding, compression and data analysis.", "description": "The Cyber Swiss Army Knife for encryption, encoding, compression and data analysis.",
"author": "n1474335 <n1474335@gmail.com>", "author": "GCHQ <CyberChef@gchq.gov.uk>",
"homepage": "https://gchq.github.io/CyberChef", "homepage": "https://gchq.github.io/CyberChef",
"copyright": "Crown copyright 2016", "copyright": "Crown copyright 2016",
"license": "Apache-2.0", "license": "Apache-2.0",