Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Mirrored from https://github.com/Slazee/caddy.git
Synced Nov 11, 12:15 UTC
Typo fix in security policy
Matthew Holt committed
Apr 24, 2026 at 09:50 UTC
cf42f615662a529311fb56209a38d6a93d83d6d9
1 file changed
+3
-1
.github/SECURITY.md
+3
-1
@@ -8,7 +8,7 @@ The Caddy project would like to make sure that it stays on top of all relevant a
8
| Version | Supported |
9
| ----------- | ----------|
10
| 2.latest | ✔️ |
11
-| <= 2.latest | :x: |
11
+| < 2.latest | :x: |
12
13
14
## Acceptable Scope
@@ -25,6 +25,8 @@ Client-side exploits are out of scope. In other words, it is not a bug in Caddy
25
26
Security bugs in code dependencies (including Go's standard library) are out of scope. Instead, if a dependency has patched a relevant security bug, please feel free to open a public issue or pull request to update that dependency in our code.
27
28
+Many reports are not security bugs and can be addressed by updating the documentation.
29
+
30
We accept security reports and patches, but do not assign CVEs, for code that has not been released with a non-prerelease tag.
31
32