Update Security.md to note that GitHub security advisories can be used

This commit is contained in:
Kovid Goyal 2025-09-09 22:29:00 +05:30
parent 0d2b44ce17
commit 5e3c5e8488
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C

View file

@ -7,6 +7,5 @@ and released just like all other bugs.
## Reporting a vulnerability
Preferably send an email to kovid at kovidgoyal.net or open an issue in the
GitHub repository, though the latter means you are disclosing the vulnerability
publicly before it can be fixed.
Preferably send an email to kovid at kovidgoyal.net or open a private security
advisory using the GitHub security advisory facility.