mirror of
https://github.com/penpot/penpot.git
synced 2026-06-10 01:12:06 +00:00
1a4cee7e5a
Update SECURITY.md file to request that vulnerabilities be reported through the GitHub Security Advisories feature in the Penpot repository Signed-off-by: Madalena Melo <madalena.melo@kaleidos.net>
32 lines
981 B
Markdown
32 lines
981 B
Markdown
# Security Policy
|
||
|
||
## Reporting a Vulnerability
|
||
|
||
We take the security of this project seriously. If you have discovered
|
||
a security vulnerability, please do **not** open a public issue.
|
||
|
||
Please report vulnerabilities through the [GitHub Security Advisories](https://github.com/penpot/penpot/security/advisories
|
||
) feature in the Penpot repository.
|
||
|
||
### What to include:
|
||
|
||
* A brief description of the vulnerability.
|
||
* Steps to reproduce the issue.
|
||
* Potential impact if exploited.
|
||
|
||
We appreciate your patience and your commitment to **responsible disclosure**.
|
||
|
||
---
|
||
|
||
## Security Contributors
|
||
|
||
We are incredibly grateful to the following individuals and
|
||
organizations for their help in keeping this project safe.
|
||
|
||
* **Ali Maharramli** – for identifying critical path traversal vulnerability
|
||
|
||
|
||
> **Note:** This list is a work in progress. If you have contributed
|
||
> to the security of this project and would like to be recognized (or
|
||
> prefer to remain anonymous), please let us know.
|