From 93bcfc67fe67ba998e5108c3250bbb00d0f88573 Mon Sep 17 00:00:00 2001 From: daniel31x13 Date: Tue, 2 Jan 2024 07:01:04 -0500 Subject: [PATCH] updated SECURITY.md --- .github/SECURITY.md | 22 ++++++++++++---------- 1 file changed, 12 insertions(+), 10 deletions(-) diff --git a/.github/SECURITY.md b/.github/SECURITY.md index 4e1c81f..8eff40c 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -1,17 +1,19 @@ -# Security Policy +# Security -## Supported Versions +The Linkwarden team and community take security bugs in Linkwarden seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions. -| Version | Supported | -| ------- | --------- | -| 1.x.x | ✅ | +# Reporting Security Issues -## Reporting a Vulnerability +**Please do not report security vulnerabilities through public GitHub issues.** -First off, we really appreciate the time you spent! +Instead, please use the GitHub Security Advisory ["Report a Vulnerability"](https://github.com/linkwarden/linkwarden/security/advisories/new) tab. -If you found a vulnerability, these are the ways you can reach us: +You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message: +[security@linkwarden.app](mailto:security@linkwarden.app) -Email: [security@linkwarden.app](mailto:security@linkwarden.app) -Or you can directly DM me via Twitter: [@daniel31x13](https://twitter.com/Daniel31X13). +After the initial reply to your report, the security team will keep you informed of the progress towards a fix and full announcement, and may ask for additional information or guidance. + +# Preferred Languages + +We prefer all communications to be in English. \ No newline at end of file