Security

Report a vulnerability

SECURITY.md

Security Policy

Supported DIRAC Versions

Version	Supported
>= 8.0	✅
< 8.0	❌

Reporting a Vulnerability

You can privately report vulnerability at https://github.com/DIRACGrid/DIRAC/security

Unauthorized users can read proxy contents during generation
GHSA-v6f3-gh5h-mqwx published Apr 9, 2024 by fstagni

High
TokenManager not checking permissions on cached tokens
GHSA-59qj-jcjv-662j published Feb 8, 2024 by chrisburr

Critical

Learn more about advisories related to DIRACGrid/DIRAC in the GitHub Advisory Database