wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-08-11 05:11:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10559 from MarkAtwood/security-policy-canonical-pointer

Browse Source 
docs: consolidate security policy to canonical website URL
This commit is contained in:
David Garske
2026-07-10 09:43:02 -07:00
committed by GitHub
parent 3538c4db7a 66fe117538
commit 0913436957
1 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/SECURITY.md
+18 -4
View File
@@ -2,12 +2,26 @@
## Reporting a Vulnerability
**Use of the wolfSSL Vulnerability Report Template is mandatory.** All security reports must use [`SECURITY-REPORT-TEMPLATE.md`](../SECURITY-REPORT-TEMPLATE.md), with every required field completed. Reports that do not use the template, or that leave required fields incomplete, will not receive CVE consideration.
**Use of the wolfSSL Vulnerability Report Template is mandatory.** All security
reports must use [`SECURITY-REPORT-TEMPLATE.md`](../SECURITY-REPORT-TEMPLATE.md),
with every required field completed. Reports that do not use the template, or
that leave required fields incomplete, will not receive CVE consideration.
Submit the completed template to **support@wolfssl.com**.
Submit the completed template to **support@wolfssl.com**. You may also send it to
**secure@wolfssl.com** and encrypt it with our PGP key:
Non-template submissions may still be reviewed on the merits and, where appropriate, addressed as hardening fixes in a future release.
Fingerprint: A2A4 8E7B CB96 C5BE CB98 7314 EBC8 0E41 5CA2 9677
Key server: keys.openpgp.org
Non-template submissions may still be reviewed on the merits and, where
appropriate, addressed as hardening fixes in a future release.
**Please keep the vulnerability private** until a fix has been released.
For the full policy — severity rubric, coordinated-disclosure practice, and reporter credit — see [`SECURITY-POLICY.md`](../SECURITY-POLICY.md).
## Full Policy
For the full policy — severity rubric, scope, coordinated-disclosure practice,
and reporter credit — see [`SECURITY-POLICY.md`](../SECURITY-POLICY.md). The same
policy is also published at
<https://www.wolfssl.com/.well-known/vulnerability-disclosure-policy.txt> so that
other wolfSSL repositories can reference one canonical copy.