From 68271e6af0eb7df90fad096c065c3a2d45832e44 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E1=B4=8A=E1=B4=8F=E1=B4=87=20=E1=B4=84=CA=9C=E1=B4=87?= =?UTF-8?q?=C9=B4?= Date: Sat, 31 Jan 2026 12:01:23 -0500 Subject: [PATCH] chore: update vulnerability reporting guidelines [skip ci] --- SECURITY.md | 1 + 1 file changed, 1 insertion(+) diff --git a/SECURITY.md b/SECURITY.md index f66b66762..cf86190a7 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -14,6 +14,7 @@ Existing vulnerability reports are being tracked in [GitHub Security Advisories] 1. Report an advisory for the vulnerability. - Please be aware that **only advisories reported in plain English** will be reviewed. + - We DO NOT accept vulnerabilities cannot be reproduced on the latest `main` commit. 1. Project maintainers review the advisory: - Ask clarifying questions - Make sure there was no prior advisory exists for the same vulnerability