Vulnerability Fixing Policies

CodeArts Repo Vulnerability Fixing Time

High-risk vulnerabilities:

An emergent OS vulnerability will be released in line with the related policies and process. A fix will be provided in about one month. You can fix the vulnerability on your own.

Other vulnerabilities:

Upgrade versions to fix other vulnerabilities.

Fixing Statement

To prevent customers from being exposed to unexpected risks, CodeArts Repo does not provide other information about the vulnerability except the vulnerability background, details, technical analysis, affected functions/versions/scenarios, solutions, and reference information.

In addition, CodeArts Repo provides the same information for all customers to protect all customers equally. CodeArts Repo will not notify individual customers in advance.

CodeArts Repo does not develop or release intrusive code (or code for verification) to exploit vulnerabilities.