Skip to content

Security: FlyGACA/Library

SECURITY.md

Security Policy

The security of the Fly GACA Library repository is a top priority. We take the integrity and reliability of the aviation regulations documents and associated resources very seriously. Please review the following policy for information on supported versions and guidelines for reporting security vulnerabilities.

Supported Versions

Here we outline which versions of the Fly GACA Library are currently being supported with security updates.

Version Supported
5.1.x
5.0.x
4.0.x
< 4.0

Only the versions of documents and tools listed above are currently receiving security updates. Older versions are not supported and may contain outdated information or known security vulnerabilities.

Reporting a Vulnerability

If you believe you have found a security vulnerability within the Fly GACA Library, please do not disclose this issue publicly. Instead, please take the following steps to report it responsibly:

  1. Email us directly at i@flygaca.com with a detailed description of the vulnerability.
  2. Include steps to reproduce the issue if applicable.
  3. Wait for an initial response from our team, which you should expect within 72 hours.
  4. During this time, we will review the report and may contact you for additional information.
  5. After a thorough investigation, we will acknowledge the receipt of your report if it is deemed valid.
  6. We will keep you informed of the status of the fix and disclosure process.
  7. We strive to fix any verifiable security issue within a reasonable time frame and release a security update as needed.

We appreciate your help in keeping the Fly GACA Library secure. Thank you for your responsible disclosure and for supporting the safety and integrity of aviation regulatory information.

There aren’t any published security advisories