Add instructions for reporting security issues.

2026-10-11 22:49:58 +00:00 · 2022-06-13 09:25:13 +02:00
parent 3484fcb60b
commit 479115720e
1 changed files with 16 additions and 0 deletions
@@ -0,0 +1,16 @@
+Reporting security issues
+=========================
+
+The YARA authors try their best to keep this software free of security issues,
+but 100% secure software does not exist. We appreciate all kinds of bug reports,
+but those that constitute a security vulnerability are specially welcomed and
+they will be prioritized and publicly acknowledged.
+
+ Please do not open a GitHub issue to report a security vulnerability. If you
+ believe you have found a security vulnerability, please submit your report to
+
+ ```
+ [email protected]
+ ```
+
+We'll get back to you as soon as possible (usually in 1-2 days).