upstream/upstream-espocrm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

snapshot of https://github.com/espocrm/espocrm.git (master, 2026-09-18; blobs > 131072B omitted)
Some checks failed
Test / Test on PHP 8.3 (push) Failing after 5s
Details
Test / Test on PHP 8.4 (push) Failing after 4s
Details
Test / Test on PHP 8.5 (push) Failing after 3s
Details
TypeScript static analysis / TypeScript check (push) Failing after 14s
Details
Test Integration on MySQL / Test on PHP 8.3 (push) Failing after 1s
Details
Test Integration on MySQL / Test on PHP 8.5 (push) Failing after 1s
Details
Test Integration on PostgreSQL / Test on PHP 8.4 fix (push) Failing after 1s
Details
Test Integration on PostgreSQL / Test on PHP 8.4 master (push) Failing after 1s
Details

Browse Source
This commit is contained in:
upstream-mirror
2026-09-18 04:19:15 +05:00
commit 7cc7e6b4f3
10077 changed files with 900756 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
.github/SECURITY.md vendored Normal file
View File

@@ -0,0 +1,15 @@
# Security Policy
## Reporting a vulnerability
If you believe you have discovered a vulnerability in EspoCRM, please contact us via [this](https://www.espocrm.com/contacts/) or [this](https://www.espocrm.com/support/) forms. Or create a private vulnerability report on GitHub.
What reports we do not accept:
- Executing PHP code by an extension, during extension installation or upgrade process.
- Exposing contacts through a target list, campaign or mass email features, considering the user has access to these features.
- SSRF in IMAP/SMTP with TOCTOU.
Submitting multiple unverified reports without a proper proof of concept
(for example, by simply copy-pasting LLM-generated output) may be considered abuse of the reporting process
and may result in the reporting account being blocked.