Skip to content

docs: clarify ownership and times for security reporting #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
May 15, 2025
Merged

docs: clarify ownership and times for security reporting #15

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
ae119b3
docs: clarify ownership and times for security reporting
UlisesGascon Mar 3, 2025
c0c9278
Update SECURITY.md
UlisesGascon Mar 4, 2025
4aa140b
Update SECURITY.md
UlisesGascon Mar 4, 2025
96bb4f6
docs: simplified policy
UlisesGascon Mar 8, 2025
f368372
Merge branch 'master' into ulises/response-time
UlisesGascon May 15, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update SECURITY.md
  • Loading branch information
@UlisesGascon
UlisesGascon authored Mar 4, 2025
commit 4aa140b12a003267aa70688b1fadb7ce4ee037c1
5 changes: 4 additions & 1 deletion SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,11 @@ link or an attachment.

A [Security triage team member](https://github.com/expressjs/security-wg#security-triage-team)
or [the repo captain](https://github.com/expressjs/express/blob/master/Contributing.md#active-projects-and-captains)
will acknowledge your email within 3 working days, and will send a more detailed
will acknowledge your email within 5 working days, and will send a more detailed
response within 7 working days indicating the next steps in handling your report.
These timelines may extend when our triage
volunteers are away on holiday, particularly at the end of the year.

After the initial reply to your report, the security team will
endeavor to keep you informed of the progress towards a fix and full
announcement, and may ask for additional information or guidance.
Expand Down
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy