This Eclipse Foundation project adheres to the Eclipse Foundation Vulnerability Reporting Policy and the Eclipse Foundation Baseline Security Policy.

If you think you have found a vulnerability in this repository, please report it through coordinated disclosure.

Do not report security vulnerabilities through public issues, discussions, or pull requests.

Create a confidential issue in the Eclipse Foundation Vulnerability Reporting Tracker.

More information about reporting and disclosure is available from the Eclipse Foundation Security page.

Please include as much of the following information as possible:

• The type of issue.
• Affected version or versions.
• The impact and how an attacker might exploit the issue.
• Steps to reproduce the issue.
• The affected branch, commit, or source location.
• Relevant configuration and log files.
• Proof-of-concept or exploit code, if available.

Eclipse Coffee Builder has not yet published its first release. No released version is currently supported. Security fixes are applied to the active develop development line until the first release establishes a released-version support policy.