If you discover a security vulnerability in dskt.cc or it's related services, please:
- DO NOT create a public issue
- Email security@dskt.cc with:
- Subject line: "SECURITY: Brief description"
- Detailed description of the vulnerability
- Steps to reproduce
- Potential impact
- Your contact information
- Initial Response: Within 24 hours
- Status Update: Within 72 hours
- Resolution Timeline: Case-by-case basis
- We follow responsible disclosure practices
- Public disclosure only after patch is available
- Credit will be given to the reporter
- CVE IDs will be requested when applicable
In scope:
- dskt.cc website
- api.dskt.cc
- Desktop Mate mod loader
Out of scope:
- Third-party mods
- User configurations