From 479115720e91e695eb5607a82f5c379ac894eaf6 Mon Sep 17 00:00:00 2001 From: "Victor M. Alvarez" Date: Mon, 13 Jun 2022 09:25:13 +0200 Subject: [PATCH] Add instructions for reporting security issues. --- SECURITY.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..8e0959e7 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,16 @@ +Reporting security issues +========================= + +The YARA authors try their best to keep this software free of security issues, +but 100% secure software does not exist. We appreciate all kinds of bug reports, +but those that constitute a security vulnerability are specially welcomed and +they will be prioritized and publicly acknowledged. + + Please do not open a GitHub issue to report a security vulnerability. If you + believe you have found a security vulnerability, please submit your report to + + ``` + vmalvarez@virustotal.com + ``` + +We'll get back to you as soon as possible (usually in 1-2 days).