diff --git a/SECURITY.md b/SECURITY.md index cc4deb9..341a7c0 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,11 +1,11 @@ # Security Policy +## Reporting a Vulnerability + +Please **DO NOT** file a public issue to report a security vulberability, instead send your report privately to **oss@jessesquires.com**. This will help ensure that any vulnerabilities that are found can be [disclosed responsibly](https://en.wikipedia.org/wiki/Responsible_disclosure) to any affected parties. + ## Supported Versions Project versions that are currently being supported with security updates vary per project. Please see specific project repositories for details. If nothing is specified, only the latest major versions are supported. - -## Reporting a Vulnerability - -Please report any security vulnerabilities to **oss@jessesquires.com**.