Skip to content

Security: Jumoo/uSync.Automate

Security

SECURITY.md

Security Policy

Supported versions

This repo targets Umbraco 17 / .NET 10 and ships three packages - uSync.Automate, uSync.Automate.Actions, and uSync.Automate.Actions.Complete - all versioned and released together from main.

Version Branch Supported
17.x main Yes

Reporting a vulnerability

Please do not open a public issue for a security problem.

Email info@jumoo.co.uk with a description of the issue, the version affected, and steps to reproduce it. We'll acknowledge within a few working days and keep you updated as we work on it.

These packages run uSync import/export, uSync.Complete publisher push/pull, and restore-point operations from Umbraco Automate workflows - so if the issue involves how a workflow step resolves permissions, how the publisher's server-to-server push/pull authenticates, or anything that could let an automation run with more access than intended, say so - those get sequenced first.

There aren't any published security advisories