GIRP (Guided Incident Response Platform) is a security product — we take vulnerability reports seriously and appreciate responsible disclosure.

Please report security vulnerabilities by email to:

security@bavariabyte.com

Please include:

• A description of the vulnerability and its impact
• Steps to reproduce (proof of concept if possible)
• The affected component/repository and version or commit

Please do not open public GitHub issues for security vulnerabilities.

• We will acknowledge your report within 5 business days.
• We will keep you informed about the progress of the fix.
• Once a fix is released, we will credit you in the release notes if you wish.

This policy applies to all repositories of the GIRP platform: formbuilder, frontend-inputform, backend-inputform, frontend-socview, backend-socview, launcher, girp-stack and database-models.