You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: SECURITY.md
+2Lines changed: 2 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,6 +7,7 @@ Please report security issues **privately** using GitHub’s **Report a vulnerab
7
7
**Do not** file public GitHub issues for security problems.
8
8
9
9
When reporting, please include:
10
+
10
11
- Affected project/repo and version(s)
11
12
- Impact and component(s) involved
12
13
- Reproduction steps or PoC (if available)
@@ -19,6 +20,7 @@ If the project acknowledges your report but does not provide any further respons
19
20
## Coordination & Disclosure
20
21
21
22
We follow coordinated vulnerability disclosure:
23
+
22
24
- We will acknowledge your report, assess impact, and work on a fix.
23
25
- We aim to provide status updates at reasonable intervals until resolution.
24
26
- We will publish a security advisory (and **CVE via the OpenJS CNA when applicable**) once a fix or mitigation is available. We credit reporters by default unless you request otherwise.
0 commit comments