Thanks for helping make Jolution safe for everyone.

At Jolution, we take the security of our software products and services seriously. We are committed to ensuring the security of all our repositories, including the open source code managed through our GitHub organization, Jolution.

Although open source repositories are outside the scope of our bug bounty program and are not eligible for bounty rewards, we still value your contribution to our security efforts. If you discover a security vulnerability in any Jolution-owned repository, we ask you to report it to us following coordinated disclosure.

To report a security vulnerability in any Jolution-owned repository, please follow these steps:

Please do not disclose security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, please send an email to [email protected].

Please include the following information in your report to help us better understand and resolve the issue:

• The type of issue (e.g., buffer overflow, SQL injection, or cross-site scripting)
• Full paths of source file(s) related to the manifestation of the issue
• The location of the affected source code (tag/branch/commit or direct URL)
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Proof-of-concept or exploit code (if possible)
• Impact of the issue, including how an attacker might exploit the issue

This information will help us triage your report more efficiently.