We provide security updates for the main branch, and for the last stable release (X.Y) series of BgeeDB/bgee_web. Security updates will be made available as patch releases (X.Y.1, X.Y.2, etc.).

You can report a vulnerability using GitHub's private reporting feature:

1. Go to https://github.com/BgeeDB/bgee_web/security;
2. Click "Report a vulnerability" in the upper right corner of that page;
3. Fill out the form and submit your private security report.

For more information, please consult the GitHub documentation on reporting a security vulnerability.

We strive to respond to reports of a security vulnerability within 2-3 days. If your security issue is accepted, we will do what we can to fix it ASAP. If fixing the issue would take us longer than a couple of days, we will discuss the expected timeline with you.

If you feel you need to escalate the reported security issue, please use "contact us" on https://www.bgee.org.