rust-libp2p/SECURITY.md

# Security Policy

## Supported Versions

By default we provide security patches for the latest released version only. On request we patch older versions.

## Reporting a Vulnerability

Please do not file a public issue on GitHub. Instead, please [file a private security vulnerability report](https://github.com/libp2p/rust-libp2p/security/advisories/new).

If you need further assistance, please reach out to [security@libp2p.io](mailto:security@libp2p.io).
SECURITY.md: Document supported releases and security mail addr (#2800) 2022-08-08 08:14:46 +02:00			`# Security Policy`

			`## Supported Versions`

			`By default we provide security patches for the latest released version only. On request we patch older versions.`

			`## Reporting a Vulnerability`

docs: update security policy with private vulnerability reports info (#3168) This PR updates the security policy to encourage users to file security vulnerability reports through https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability The private vulnerability reports will show up here: https://github.com/libp2p/rust-libp2p/security/advisories?state=triage The maintainers will receive GitHub notification about new private vulnerability reports. 2022-12-12 15:17:05 +01:00			`Please do not file a public issue on GitHub. Instead, please [file a private security vulnerability report](https://github.com/libp2p/rust-libp2p/security/advisories/new).`

			`If you need further assistance, please reach out to [security@libp2p.io](mailto:security@libp2p.io).`