From bb8f8f569d8d2945d8d57fc950599bfcb898df07 Mon Sep 17 00:00:00 2001 From: Jun Yang Date: Tue, 17 May 2022 23:53:20 +0800 Subject: [PATCH] docs: update security policy --- SECURITY.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 909746bbd..3f59961df 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -6,8 +6,8 @@ Only the latest major version is supported with security updates. It can be chan ## Reporting a Vulnerability -Please contact yangjvn@126.com to report a vulnerability. +Please contact yangjvn@126.com to report a vulnerability or change request. -- It will be fixed very soon (maybe within 1 week or couple of days) if that vulnerability obviously affects common use cases. -- Otherwise, it'll be scheduled with a priority just like requested features (which is lower than bugs). -- If it's declined, you'll receive an email (more oftenly there will be a discuss). +- If the vulnerability in question affects common use cases, it will be treated as a bug and fixed very soon (typically within 1 week). +- Otherwise, it'll be scheduled in the same priority of feature request (which is lower than bugs). +- If the request is declined, you'll receive a reply email anyway (most likely there will be a discussion).