From 808ce859519cbf5e3578491aa448a0d31bedc503 Mon Sep 17 00:00:00 2001 From: Uditbhardwajj Date: Sun, 22 Mar 2026 14:49:11 +0530 Subject: [PATCH] Add SECURITY.md for vulnerability reporting guidelines Added a security policy document outlining vulnerability reporting and responsible disclosure practices. --- SECURITY.md | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..b2d010972 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,24 @@ +# Security Policy + +## Reporting a Vulnerability + +If you discover a security vulnerability in this repository, please report it responsibly. + +- Do NOT open a public issue for security vulnerabilities. +- Instead, report the issue privately to the OWASP team. + +You can contact OWASP via: +- https://owasp.org/contact/ + +Please include: +- Description of the vulnerability +- Steps to reproduce +- Potential impact + +## Supported Versions + +This project is actively maintained. Please ensure you are using the latest version before reporting issues. + +## Responsible Disclosure + +We follow responsible disclosure practices. We appreciate your efforts in improving the security of this project.