v2
This commit is contained in:
+11
@@ -0,0 +1,11 @@
|
||||
# Security issue reporting & disclosure process
|
||||
|
||||
Please reach out if you think you've found a security issue.
|
||||
|
||||
Email Evan Hahn at <me@evanhahn.com>, on Signal at [EvanHahn.64](https://signal.me/#eu/vDide_HmUgHnNa0usMXq8oHAA0gnl5dzCqDeHyXhkeIbIiOcPVhCZKXIZteSqoc8), or [in other ways](https://evanhahn.com/contact).
|
||||
|
||||
My playbook for security issues:
|
||||
|
||||
- Acknowledge and address the concern as soon as possible
|
||||
- Issue advisories (CVEs, for example) as needed. Public disclosure may be embargoed to give people time to update
|
||||
- Consider patching non-current major versions depending on popularity and severity
|
||||
Reference in New Issue
Block a user