Skip to content

Security: CryptoHives/.github

Security

SECURITY.md

๐Ÿ›ก๏ธ Security Policy โ€” CryptoHives Open Source Initiative

Thank you for helping to keep CryptoHives Open Source Initiative and its ecosystem secure.

We take the security of our software seriously.
If you discover a potential vulnerability, please report it responsibly using the instructions below.


๐Ÿ”’ Reporting a Vulnerability

Do not open public GitHub issues for security reports.
Instead, please report vulnerabilities through one of the following private channels:

1. GitHub Security Advisories (preferred)

You may submit a private advisory via
๐Ÿ‘‰ GitHubโ€™s private vulnerability reporting tool.

Please include:

  • A detailed description of the vulnerability
  • Steps to reproduce or proof-of-concept
  • The potential impact and affected components
  • Your name and contact info (if youโ€™d like credit)

2. Email

Alternatively send your report to: security@cryptohives.org
Encrypt your message using our PGP public key (see below).


๐Ÿ“… Response Timeline

Once this project is fully funded and the Nuget packages are in a released state, the following response timeline will be implemented:

Stage Response Time
Acknowledgement of report within 48 hours
Initial assessment within 5 business days
Fix development depends on complexity
Public disclosure after a verified fix is released

Weโ€™ll keep you informed throughout the process and credit you for responsible disclosure if desired.


โœ… Supported Versions

Version Supported
Latest release โœ… Supported
Older releases โŒ Not supported
Pre releases โŒ Not supported

๐Ÿ”‘ PGP Public Key

Use the following PGP key to encrypt sensitive information before sending it to us:

-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGmdWcQBEACn5xRp6OG/pm1QKyjg7x/yI6K4h5qWJ0r+eyufhRUdvR70po1a obpna6PpWRlMfhHRGA2Z19vpMZQvazTwymEOVgej8Qi2ZiPAw3soAxPFZDkaw4kt Wn3MWEhO3R3WT9/N4bQZ8klwWMDkqWaoyoppdcMvwD3LFRi8hzeXtuJzJ/6MUgN8 
qW9d77Bu4cbHvPMslVT8cw8CjKZsn5RAmXu3COZRmoWkaje9fgyavRM7fEOfyxLA a1Ef6Ky641pTFl6rHZeSb4M/Z2wSiyQhGum6v3GJN8NJY4rXKICSJrdkLBpIfUAu AitQu0wxFrwa1UIcpgNjw6HXQf/yMrwl9HA/wkoQtdotf9qGJtP56jkz+T5nJg8v 
furaXviSaYWigcO2uYZWoz6FfvtCwSE/UvltzXpix67IzNjfJvsZFia86U330M8P qYadLEI1iFJhQ57THxRup1UNwZP00ymvM3svIhNAw8A9ZYI1h/kJ2RcjyQ2MspXk 3XDld558eEjiFX8dfXMTv41fkHMW33+XiIulIAPZrRJyqHUKz9MPhUtS5faeGYJd 
gCfLwA01t/nHkogML/o/5bDQ9V/CpoyoiVE0UmzTLu1aTnQJnTiq8PdRjv2U8doh FPrTfTNsUsFefTTadPYBzvMdCmy7IqVmfkm1hY8QD0IU09lvDxH+XXUfxQARAQAB tC9DcnlwdG9IaXZlcyBTZWN1cml0eSA8c2VjdXJpdHlAY3J5cHRvaGl2ZXMub3Jn 
PokCVwQTAQgAQRYhBF3vlZ7mKSalaVITEZ+JnK3rQROHBQJpnVnEAhsDBQkB4TOA BQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEJ+JnK3rQROHi4oP/igCuDqu QVaiazVcMsHV2LrfetYndKU3DXblK4A5+WSkymYx6piMBwVca0NpL7J5KfxRQO14 
86T8UZpJIsV1xwXtq7d9TXN/xJ/xRDdItV1RiBewYp96oulC5yVLqxA5dWNVfdkZ 3OXtB7/oB+dvQTWirnJRZAeGL1fBhWY5Z6Z2H8zvKXxTDvprECuL33Qrf6uLUlvz eIzVITPweeulTWBGZ48OsZ2ziZADTSvAIKyafXmo7AeASguYI5DQA1PfZHqe9GQf 
4RBJQA0xaEe4bYGbi2jm/GWs8ZjAONZUSirXnRDTk9sv2u4D7gjXuLliX+hzN0vd M7mgi58ei6cGaYcqaPt5DQ9DICVwl2WXVXbvXtmDm6pJ0Zpe1cN0SWAlaEk/Rmc4 cEEwKfuHCtD6MNt0gFog9Ir7JHoTgGi1dk0sXYKBBPekGVNAaR8Rya5XsaI2Wkk8 
YefA09TS/MMuFIicz1oOPDMMlv8sms4fYrizz7SueCB4qY6/44CzLm6scywxIZrb 7DdoLF+nPoiA9gigXwKrdN2dRv+CB0c8SQPcCdcJA+mntN/DbOnXQGEXQvC9mojv T4+7tF8YUVVcKAYe5YKWSeJHutt/iaSG9OI2iBqE1zB5IA3h9elog5TtA6Iuvaqd 
m+MezSYPD9WoWzNm1K4TccemIFylxAkFG7OUuQINBGmdWcQBEADU1tzGnz0/cVuC LY28mW08vX9JHX6u4eWMEld6d9wR1hHX6g0RO6WkrY3PLu84NUmelsXqG4fZvtsv HCGl8r1E235hzQOsBAdhEMW1rstPUHxrCuWGc6fQTMWjSZ1yKdLijyRxVeMhevGD 
eGsUQSgggVtqqWzHFeWiBASIUYp+7OdU9Lny2Mvorx/lkwhZy+WV/Zy7OwJLl6jh +M4i8vaD6EmXvIzmR8O92BrMU6woANPBdQZdNHwtRcvM0qaMH3T2CNB3a7aqRmxM HyFgHXBFlpy628FD+XGEfnorOKZ74cWCYJdcR8FUG1vNgfoyewR8Mjgdupi160sE 
xopjafmpNb9ls8uV/yWA3mtfYwW4EWbhhGdZqIzllWDwM0Dn3nWldquw6GylvmZj ytKclkJlo8Gv/CqkqvJsUtFmxKHZnHrd34IUOyE4netvVNU5Q9uY4z51WjmjoXW1 my8+RqdZy3OdKV+Wz4OGrN1ujHD9tzFnj1i0fMJ/4Hj+/Zr0KHvaEne+tQQsYKEZ 
ypbAEZEMJEHGx2W9Jx6NUNirI+wLnR7N8IFCT9qLYkmbuET6B0Dy+oQXw1ESqAGn TMbC20MLQ1EFGJbX+9wQ2UMULVGyJg+u/CacSol4flhodsmpr4oBO3ZzFoOIQE+h s06RVWM+pykkockhfa1l+UtFfjNUvQARAQABiQI8BBgBCAAmFiEEXe+VnuYpJqVp 
UhMRn4mcretBE4cFAmmdWcQCGwwFCQHhM4AACgkQn4mcretBE4cYJBAAhDYY8OG7 7HHtltnqHi3eiU8SnOBhVHWNNF4vdVukV95hMOEYmXQnPxR9C2DyZSzYR/PBmEY6 rtszpxb6bSwJbrUWFkgbA0BFGHyAWUu0+aWePcSVRrUgYGPuxNWquDNfvhqiQmcj 
8cvU+qNkMLSTVd/qNqf734KRU6QSMLs2//Dyl+DkvPM2ZYY/XJ3Dz839cB5kChPt beBxxwyzMXM69lj/di5m9h9CxmQo+b/qayHCxzbfvgQ5/jxcyrVKZwXdvKrwFCqD 0IrlPPJFRMjCmg0XUVGVrFwNUpa4ss7L9n4L/hsAJ4xAzi3641jQboY1EeaI1pHD 
o/ZuuOhQXECjaAAScxO8HbxOJv1dMLQB7PRyk6G+bE3PNRbEWyG99g+CSrPfstfL 52BSJm5xhdizxnuzol15pAPggeDopT7eQlCdhZVlbChK/ncBhTiOGLf6HornimzB icvTRraRHUrRZhI7qmeZcfshWALc/4rXlkBo6BjqvNSS9DJP7grSl4Lm5JCg6RPB 
0dof3GqQTQf3MVaLXB6mICniXcd1vfh5qOnGp0pxHl1hs7AazO3/m31CyxnAwWJ5 GBV1jsn+QCMux/iER9qG+FGpMQWgg2x6cBjbSo3tzTbrrgg/onYuhkiU6ZFbcNwb uUPyinFgrz3B6fi6TsnCPQemvKMFS8l3DJI= =sFTN 
-----END PGP PUBLIC KEY BLOCK-----

Fingerprint: 5DEF 959E E629 26A5 6952 1311 9F89 9CAD EB41 1387

(Rotate keys periodically โ€” verify the latest version at https://cryptohives.org/security).


โš–๏ธ Responsible Disclosure Guidelines

We ask all researchers to:

  • Avoid publicly disclosing details until a fix is released.
  • Avoid actions that disrupt services or compromise user data.
  • Respect the privacy of users and systems during testing.

We appreciate your contribution to the safety and trust of the CryptoHives Open Source Initiative.
Together, we can keep the hives secure. ๐Ÿ


This policy follows GitHubโ€™s Security best practices.

There aren't any published security advisories