Security measures in our development
We add static code scan to our code base to make sure not to use obsolete and insecure third party dependencies.
The code base with security scan includes:
We add static scan to the Docker image we released to make sure not to use insecure third party libraries.
Report of security issue
Safety and data security is of utmost priority for the Seafile community. If you are a security researcher and have discovered a security vulnerability in our code base, we appreciate your help in disclosing it to us in a responsible manner.
Please send email toinfo@seafile.comreport any security vulnerabilities found in our community server, any of the open source code bases maintained by Seafile Ltd., or any of our commercial offerings.
Release schedule related to security issue
For each supported version, when there is a high security issue discovered or reported, we will create a new release within 2 weeks.
For critical security issue, we will notify our customers by email after the release.
