If you discover a security vulnerability in PaperImpact, please report it to us as soon as possible. Do not disclose the vulnerability publicly until we have had a chance to address it.
To report a vulnerability, please email [alphin@researchark.eu]. Provide a detailed description of the vulnerability, including:
- Steps to Reproduce: Clear steps to reproduce the vulnerability.
- Affected Version(s): Which version(s) of the project are affected?
- Potential Impact: What is the potential impact of the vulnerability?
- Any Possible Mitigations: Are there any workarounds or mitigations that users can take?
We will acknowledge your report within 48 hours and will keep you informed of our progress in addressing the vulnerability. We aim to resolve all security vulnerabilities in a timely manner.
Currently, PaperImpact is a single-version project. We will address security vulnerabilities in the latest released version.
We will publicly disclose security vulnerabilities after they have been addressed. We will credit the reporter of the vulnerability (unless they request anonymity).