Skip to content

Security: elide-dev/intellij

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported versions

Security fixes are released for the latest published version of the plugin. Older versions are not patched.

Reporting a vulnerability

Please do not open a public issue for a security problem.

Report vulnerabilities privately to engineering@elide.dev, or through GitHub's private vulnerability reporting for this repository.

Please include:

  • affected plugin version and IDE build,
  • a description of the impact,
  • reproduction steps or a proof of concept.

You can expect an acknowledgement within three business days, and an assessment with a remediation plan or a rejection rationale within ten business days. Please give us a reasonable opportunity to ship a fix before public disclosure.

Scope

This policy covers the plugin in this repository. Vulnerabilities in the Elide runtime and CLI belong in the elide-dev/elide repository; vulnerabilities in the IntelliJ Platform itself should be reported to JetBrains.

There aren't any published security advisories