Skip to content

To publicly communicate advisories about serious bugs in CosmWasm, wasmvm, and wasmd

Notifications You must be signed in to change notification settings

CosmWasm/advisories

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

CosmWasm Advisories

We at Confio love open source! We work in the best intent with a public review process but must accept that software can contains bugs and therefore our code, too.

In order to help with resolving any issues on production system, we have started the advisories project to link to authorized communication channels of CosmWasm blockchains. Confio will inform the linked chains about critical issues reported to us directly on non public channels before opening an issue on our related projects. Nevertheless providing this information should not prevent us or anybody else from working on a fix nor block a patch roll out. This also does not include bugs and issues reported to us publicly via github issues or official discord channels. Chains using our projects are encouraged to watch the github repos and official channels on CosmWasm discord in order to maintain their own software stack.

Supported projects and version

Criteria to get on the notification list

  • Run CosmWasm projects on prodution or public testnet
  • SECURITY.md in your main repo and main branch with contact details and infos on your disclosure process
  • Commitment to share issues and bugs with Confio and the CosmWasm community

If your project matches these criteria then please do a PR to add your chain to the list below.

Disclaimer

We likely will not have capacity to maintain this service for all versions and projects forever. So we want to keep the right to:

  • modify this document
  • add/remove project and versions
  • change the criterias and revisit the listed members
  • not accept every application

Notification list

See NOTIFICATION_LIST.md

About

To publicly communicate advisories about serious bugs in CosmWasm, wasmvm, and wasmd

Resources

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages