From 3520401ad81f78a7423d78618b2f445ab2ac7d12 Mon Sep 17 00:00:00 2001 From: Paul Latzelsperger Date: Thu, 8 Aug 2024 10:40:07 +0200 Subject: [PATCH] chore: add warning to README.md --- README.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 285c7b00a..3a4bf9752 100644 --- a/README.md +++ b/README.md @@ -14,6 +14,12 @@ extensibility mechanism. Here, developers find everything necessary to build and run a basic "vanilla" version of IdentityHub. +## Security Warning +Older versions of IdentityHub (in particular <= 0.3.1 ) **must not be used anymore**, as they were intended for proof-of-concept +purposes only and may contain **significant security vulnerabilities** (for example missing authn/authz on the API) and possibly +others. +**Please always use the latest version of IdentityHub.** + ## Quick start A basic launcher configured with in-memory stores (i.e. no persistent storage) can be found [here](launcher/). There are @@ -105,4 +111,4 @@ captured as [decision records](docs/developer/decision-records). ## Contributing -See [how to contribute](https://github.com/eclipse-edc/docs/blob/main/CONTRIBUTING.md) for details. \ No newline at end of file +See [how to contribute](https://github.com/eclipse-edc/docs/blob/main/CONTRIBUTING.md) for details.