At Betterpvp-2.0, we take security very seriously. We appreciate and value contributions from the community to identify and address security issues. If you discover any vulnerabilities, please follow these guidelines to report them to us securely:

1. Send an email to our security team at [email protected]. Please use this channel only to report actual security issues.
2. Provide a detailed description of the issue and, if possible, a proof of concept or steps to reproduce it.
3. Provide the exact version of the Betterpvp-2.0 plugin in which the vulnerability was found, as well as any other relevant environment information, including affected Minecraft versions.

Once we receive your report, we commit to:

• Acknowledge the receipt of your report within three business days.
• Investigate and address the issue in a reasonable timeframe.
• Keep you informed about the progress and resolution of the issue.

We appreciate responsible collaboration in disclosing vulnerabilities and are willing to publicly acknowledge the efforts of researchers who help us improve the security of Betterpvp-2.0. However, if you prefer to keep your contribution private, we will respect your request for anonymity.

To protect our users, we commit to providing coordinated disclosure of vulnerabilities. This means we will wait until a solution has been implemented before publicly disclosing any information about the vulnerability.

We thank everyone who has contributed to improving the security of Betterpvp-2.0 through responsible disclosure of vulnerabilities.

Last updated: [1/4/2024].