Skip to content

Security: figma-css-variables/community

Security

Report a vulnerability

.github/SECURITY.md

Security Policy

Important

This document explains how to report security vulnerabilities in the Design Tokens Export & Deploy plugin or its backend API.

Reporting a Vulnerability

Report vulnerabilities through GitHub Private Vulnerability Reporting:

https://github.com/figma-css-variables/community/security/advisories

Do not open public issues for confirmed or suspected security vulnerabilities.

Scope

  • Figma/Penpot plugin - the latest published version only
  • Backend API - the latest deployed version only

Response

Reports are reviewed and triaged as quickly as possible. You will receive acknowledgment when the report has been assessed.

There aren't any published security advisories