Security and software vulnerabilities

The Semantic MediaWiki project is cautious about security aspects and strives to eliminate any possible vulnerabilities in its maintained software.

Noticing a vulnerability

Special care is needed to minimize their exploitation risk if vulnerabilities are discovered. In particular, it is wise to contact the core developers directly to ensure an updated version is released before the bug is public. Also, note that the project is public and can be monitored by potential attackers, so commit messages like "Fixed critical security vulnerability" can also be problematic. For more information on handling security problems in open-source software, see Producing Open Source Software, Chapter 6. Communications: Announcing Security Vulnerabilities.

See also

Detailed information on how to report bugs.