From f3a7dea1f1e809a0c4d797ed8804cd3002dd2277 Mon Sep 17 00:00:00 2001 From: Umputun Date: Wed, 20 May 2026 13:41:06 -0500 Subject: [PATCH] docs: offer github private vulnerability reporting in security policy Mention the "Report a vulnerability" button (GitHub private vulnerability reporting) alongside the existing email contact, now that private reporting is enabled on the repository. --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 76382a5b..c2ff2cf1 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -12,4 +12,4 @@ We release patches for security vulnerabilities. ## Reporting a Vulnerability -Please report (suspected) security vulnerabilities to umputun@gmail.com. You will receive a response from us within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within a few days. +Please report (suspected) security vulnerabilities either by using GitHub's [private vulnerability reporting](https://github.com/umputun/remark42/security/advisories/new) (click the "Report a vulnerability" button on the [Security tab](https://github.com/umputun/remark42/security)) or by emailing umputun@gmail.com. You will receive a response within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within a few days.