rust-libp2p/SECURITY.md
Piotr Galar 63ffc7fb0f
docs: update security policy with private vulnerability reports info (#3168)
This PR updates the security policy to encourage users to file security vulnerability reports through https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability

The private vulnerability reports will show up here: https://github.com/libp2p/rust-libp2p/security/advisories?state=triage
The maintainers will receive GitHub notification about new private vulnerability reports.
2022-12-12 14:17:05 +00:00

12 lines
460 B
Markdown

# Security Policy
## Supported Versions
By default we provide security patches for the latest released version only. On request we patch older versions.
## Reporting a Vulnerability
Please do not file a public issue on GitHub. Instead, please [file a private security vulnerability report](https://github.com/libp2p/rust-libp2p/security/advisories/new).
If you need further assistance, please reach out to [security@libp2p.io](mailto:security@libp2p.io).