This commit is contained in:
+8
-5
@@ -6,11 +6,14 @@ Security fixes are applied to the latest release and the `main` branch.
|
||||
|
||||
## Reporting a Vulnerability
|
||||
|
||||
Do not open a public issue for an undisclosed vulnerability. Use the
|
||||
repository host's private security-reporting feature when available, or contact
|
||||
the repository owner privately. Include affected versions, impact, reproduction
|
||||
steps, and any suggested mitigation. Maintainers should acknowledge a report
|
||||
within seven days and coordinate disclosure after a fix is available.
|
||||
Do not open a public issue for an undisclosed vulnerability. The repository is
|
||||
hosted on Gitea, which has no private vulnerability-reporting feature, so
|
||||
contact the repository owner privately through the hosting platform instead of
|
||||
filing a public issue.
|
||||
|
||||
Include affected versions, impact, reproduction steps, and any suggested
|
||||
mitigation. Maintainers should acknowledge a report within seven days and
|
||||
coordinate disclosure after a fix is available.
|
||||
|
||||
## Deployment Baseline
|
||||
|
||||
|
||||
Reference in New Issue
Block a user