From 12c9334448c6bc20274cd0c071477a413ac5703f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dani=C3=ABl=20Klabbers?= Date: Thu, 10 Jun 2021 21:56:30 +0200 Subject: [PATCH] minor improvements to the security policy --- framework/core/.github/SECURITY.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/framework/core/.github/SECURITY.md b/framework/core/.github/SECURITY.md index d0022ab87..2f679aa7d 100644 --- a/framework/core/.github/SECURITY.md +++ b/framework/core/.github/SECURITY.md @@ -1,10 +1,12 @@ # Security Policy -## Supported Versions +## Versions -**We only patch security vulnerabilities in the latest major release (1.x).** +Due to the nature of our project - being open source - we have decided to patch only the latest major release (currently v1.x) for security vulnerabilities. -We use [huntr.dev](https://huntr.dev/) for security issues that affect our project. If you believe you have found a vulnerability, please disclose it via [this form](https://huntr.dev/bounties/disclose/?target=https://github.com/flarum/core). +## How to disclose + +Please use [huntr.dev](https://huntr.dev/) for security issues that affect our project. If you believe you have found a vulnerability, please disclose it via [this form](https://huntr.dev/bounties/disclose/?target=https://github.com/flarum/core). This will enable us to **review** the vulnerability, **fix** it promptly, and **reward** you for your efforts.