Merge pull request #6785 from marc1706/ticket/17478

[ticket/17478] Add security policy file
This commit is contained in:
Marc Alexander 2025-03-01 18:12:17 +01:00 committed by GitHub
commit 63c110b511
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

13
SECURITY.md Normal file
View file

@ -0,0 +1,13 @@
# Security Policy
## Reporting a Vulnerability
Please do not post potential security vulnerabilities publicly. Instead, report them to the phpBB team.
We take security very seriously and will respond to reports about potential security vulnerabilities as quickly as possible.
There are multiple ways a potential security vulnerability can be reported:
- HackerOne: [phpBB | Vulnerability Disclosure Program | HackerOne](https://hackerone.com/phpbb)
- Create a report in the security tracker: [Security Tracker](https://www.phpbb.com/security/)
- Send an email: [security@phpbb.com](mailto:security@phpbb.com)
Please provide as much detail as possible when reporting a vulnerability. You can expect to receive an update on your report within a few days. If the vulnerability is accepted, we will work on a fix and keep you informed of the progress. If the vulnerability is declined, we will provide an explanation.