Skip to content

Security: omkarhole/Alumni-Management-System

Security

Security.md

Security Policy

Supported Versions

Version Supported
1.x (Current)
< 1.0

Reporting a Vulnerability

The Alumni-Management-System handles manage alumni connections, events, job postings, and foster community engagement. We take security vulnerabilities seriously.

Please do NOT open a public GitHub issue for security vulnerabilities.

Instead, report privately via:

Include in Your Report

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact (especially on credit/financial data)
  • Suggested fix (optional)

Response Timeline

Action Timeframe
Acknowledgement Within 48 hours
Status Update Within 5 business days
Fix / Resolution Within 30 days

Security Practices

  • All PRs are reviewed by the maintainer before merging
  • No sensitive data (API keys, credentials) is hardcoded
  • ML models handle financial data — inputs are validated and scaled before processing
  • Dependencies (npm - Package management 🔄 Nodemon - Development auto-restart 🔍 ESLint - Code linting 📝 Prettier - Code formatting, etc.) are periodically reviewed
  • Contributors must follow our Code of Conduct

Disclosure Policy

Once a vulnerability is resolved:

  1. A patched version will be released
  2. Reporter will be credited (if they wish)
  3. A brief summary of the fix will be shared

Contact

Omkar — Project Maintainer & NSoC'26 Admin

There aren't any published security advisories