From 5e3c5e84880a80492fef9513ebf09f76a50459f3 Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Tue, 9 Sep 2025 22:29:00 +0530
Subject: [PATCH] Update Security.md to note that GitHub security advisories
 can be used

---
 SECURITY.md | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/SECURITY.md b/SECURITY.md
index 88218d35d..fa3241080 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -7,6 +7,5 @@ and released just like all other bugs.
 
 ## Reporting a vulnerability
 
-Preferably send an email to kovid at kovidgoyal.net or open an issue in the
-GitHub repository, though the latter means you are disclosing the vulnerability
-publicly before it can be fixed.
+Preferably send an email to kovid at kovidgoyal.net or open a private security
+advisory using the GitHub security advisory facility.