Skip to content

Repository navigation

Security: musopen/moonlight

Security

Report a vulnerability

SECURITY.md

Security policy

Reporting a vulnerability

Please do not open a public GitHub issue for security problems.

Report them privately through GitHub instead: go to the repository's Security tab and choose Report a vulnerability. Only the maintainers can see the report.

Please include:

  • what the problem is and what an attacker could do with it
  • steps to reproduce it, or a proof of concept
  • the Moonlight version and your macOS or iOS version

We'll acknowledge your report, keep you updated while we work on a fix, and credit you when the fix is released unless you'd rather stay anonymous.

Supported versions

Security fixes go into the latest release of Moonlight. Please make sure you can reproduce the problem on the latest version before reporting.

Scope

This covers the Moonlight apps, the code in this repository, and the Musopen services the apps use, including the website and feedback form at moonlightapp.org. Problems in third-party libraries should also be reported to their own maintainers. Problems with Apple's iCloud, Google Analytics or Last.fm should go to those companies.

There aren't any published security advisories