From 35ac27e45f8edb1902b46354a56ed6ce1aa03cd7 Mon Sep 17 00:00:00 2001 From: Aronai Sieyes Date: Tue, 11 Apr 2023 11:18:12 -0400 Subject: [PATCH] Create SECURITY.md --- SECURITY.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000000..a47f021db13 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,18 @@ +# Security Policy + +## Supported Versions + +Please check to ensure the vulnerability still exists in the current `master` branch before reporting. + +## Reporting a Vulnerability + +Please be as descriptive as possible! + +## Older Libraries/Dependencies + +Some of our libraries may not be used in a way that makes +them vulnerable, because we tend to only use a couple of +functions out of them. If that's the case and we think that +your vulnerability won't apply to our use-case, then +it may be closed, even if we're using an older version +of the library.