Skip to content

Security: rheinason/MoleHill

SECURITY.md

Security policy

MoleHill is a Rhino 8 plug-in that reads and writes Rhino documents, imports survey and LandXML files, and installs through Rhino's Package Manager. If you find a way that a crafted document or import file could run code, corrupt data beyond the terrain being edited, or read or write files it should not, please report it privately.

Reporting

Use GitHub's private vulnerability reporting: on this repository's Security tab, choose Report a vulnerability. Please do not open a public issue for a security problem.

Include the MoleHill and Rhino versions, what the file or input does, and a minimal file that shows it if you can share one.

Supported versions

Only the latest release on the Rhino Package Manager receives fixes.

There aren't any published security advisories