X-Git-Url: https://git.openstreetmap.org./nominatim.git/blobdiff_plain/8191c747b964530f67b064b43954e13a5b1a0791..90e207a4974a8714e4bbc99131d18314cabcc9bd:/SECURITY.md diff --git a/SECURITY.md b/SECURITY.md index d023c1e5..3ec22cbd 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -9,10 +9,10 @@ versions. | Version | End of support for security updates | | ------- | ----------------------------------- | +| 4.5.x | 2026-09-12 | +| 4.4.x | 2026-03-07 | +| 4.3.x | 2025-09-07 | | 4.2.x | 2024-11-24 | -| 4.1.x | 2024-08-05 | -| 4.0.x | 2023-11-02 | -| 3.7.x | 2023-04-05 | ## Reporting a Vulnerability @@ -36,5 +36,6 @@ incident. Announcements will also be published at the ## List of Previous Incidents -* 2020-05-04 - [SQL injection issue on /details endpoint](https://lists.openstreetmap.org/pipermail/geocoding/2020-May/002012.html) +* 2023-11-20 - [SQL injection vulnerability](https://nominatim.org/2023/11/20/release-432.html) * 2023-02-21 - [cross-site scripting vulnerability](https://nominatim.org/2023/02/21/release-421.html) +* 2020-05-04 - [SQL injection issue on /details endpoint](https://lists.openstreetmap.org/pipermail/geocoding/2020-May/002012.html)