Security Policy

Report a vulnerability in this site

If you find a security issue in blog.adeyemi.xyz, email folarinabdul30@gmail.com with the affected URL, the steps to reproduce it, and what an attacker could do with it.

In scope: this site and its interactive figures. Out of scope: denial of service, automated scanner output with no demonstrated impact, and third-party services the site links to.

Testing in good faith within that scope, without accessing other people's data or degrading the site, is welcome. I will not pursue legal action over it.

How I disclose what I find

I report privately to the maintainers, usually through GitHub Security Advisories, and publish a writeup only after a fixed release ships. Each writeup cites the advisory and CVE IDs and credits the maintainers who fixed it.

Machine-readable

This policy is referenced from /.well-known/security.txt (RFC 9116).