This policy applies to:
https://monedario.cl/- The source code and content published from this repository
Please do not open public GitHub issues for security reports.
Send vulnerability reports to security@monedario.cl.
When possible, include:
- A clear description of the issue and affected URL or component
- Reproduction steps or proof of concept
- Impact assessment
- Any suggested remediation
- Initial acknowledgement within 3 business days
- Status update within 14 calendar days
Please:
- Avoid accessing, modifying, or deleting other users' data
- Avoid denial-of-service, spam, or automated high-volume traffic
- Stop testing and report promptly if you uncover sensitive data
- Give us reasonable time to investigate and remediate before public disclosure
This project does not currently offer a bug bounty or paid disclosure program.