diff --git a/.github/SECURITY.md b/.github/SECURITY.md index b44d54d36..a84adabab 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -14,15 +14,9 @@ If you find such vulnerability, it's important to disclose it in a quick and sec ## Reporting a Vulnerability -**DO NOT CREATE AN ISSUE ON GITHUB** to report a potential vulnerability / security problem. Instead, choose one of these options: +**DO NOT CREATE AN ISSUE ON GITHUB** to report a potential vulnerability / security problem. Instead, submit a security advisory: -### A) Disclose on Huntr.dev - -Disclose the vulnerability on [Huntr.dev](https://huntr.dev/bounties/disclose) for the repository `https://github.com/Requarks/wiki`. - -### B) Send an email - -Send an email to security@requarks.io. +https://github.com/requarks/wiki/security/advisories/new Include as much details as possible, such as: - The version(s) of Wiki.js that are impacted @@ -31,4 +25,4 @@ Include as much details as possible, such as: - Any potential fixes or reference code you think might be helpful in resolving the issue - Your GitHub username if you'd like to be included as a collaborator on the private fix branch -The vulnerability will be investigated ASAP. If deemed valid, a draft security advisory will be created on GitHub and you will be included as a collaborator. A fix will be worked on in a private branch to resolves the issue. Once a fix is available, the advisory will be published. +The vulnerability will be investigated ASAP. If deemed valid, a fix will be worked on in a private branch to resolves the issue. Once a fix is available, the advisory will be published.