Security Policy

Supported Versions

We only provide security updates for the latest version that has been released. See our Release page The "support latest only" holds both for WrongSecrets and WrongSecrets-CTF-party.

Reporting a Vulnerability

Please use Slack to report a vulnerability in the #project-wrongsecrets channel. You can register for the OWASP Slack here. Given this is a p0wnable app, we do not have any bug bounty or rewards for you ;-).

Given the project is run by volunteers, we intend to respond within a week.