8000 Advertise Availability of Security Vulnerability Notifications by felixhandte · Pull Request #3909 · facebook/zstd · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Advertise Availability of Security Vulnerability Notifications #3909

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Feb 13, 2024
Merged

Advertise Availability of Security Vulnerability Notifications #3909

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b6805c5
Add SECURITY.md File
felixhandte Feb 13, 2024
e13d099
Advertise Availability of Security Vulnerability Notifications
felixhandte Feb 13, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# Reporting and Fixing Security Issues

Please do not open GitHub issues or pull requests - this makes the problem immediately visible to everyone, including malicious actors. Security issues in this open source project can be safely reported via the Meta Bug Bounty program:

https://www.facebook.com/whitehat

Meta's security team will triage your report and determine whether or not is it eligible for a bounty under our program.

# Receiving Vulnerability Notifications

In the case that a significant security vulnerability is reported to us or discovered by us---without being publicly known---we will, at our discretion, notify high-profile, high-exposure users of Zstandard ahead of our public disclosure of the issue and associated fix.

If you believe your project would benefit from inclusion in this list, please reach out to one of the maintainers.

<!-- Note to maintainers: this list is kept [here](https://fburl.com/wiki/cgc1l62x). -->
0