Skip to content

Route vulnerability reports through private reporting and security@ #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
imanimanyara merged 1 commit into from
Sep 29, 2026
Merged

Route vulnerability reports through private reporting and security@ #1

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,11 @@

## Reporting a vulnerability

Email **security@simtabi.com**. Do not open a public GitHub issue.
Use GitHub private vulnerability reporting: open a private report at
<https://github.com/simtabi/gendia/security/advisories/new>. The report stays
attached to the repository, with a draft advisory and a CVE request path. If you
do not use GitHub, email **security@simtabi.com**. Do not open a public GitHub
issue.

Acknowledgement within 48 hours. Patch SLA: 14 days for severity ≤ 3, 30 days for severity 4. Coordinated disclosure with a default 90-day embargo from triage.

Expand Down
Loading