From 180fc2d99f2f7a709896e7657675e9de1c184ca0 Mon Sep 17 00:00:00 2001 From: EquityBot <333319867+EquityBot@users.noreply.github.com> Date: Sun, 1 Nov 2026 19:39:54 +1100 Subject: [PATCH] docs(security): link the private vulnerability reporting form --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 218961e..69234c3 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,6 +2,6 @@ GhostSoap handles the personal details of the person using it, so a flaw in how it stores or sends them matters. -Please report a vulnerability privately through this repository's private vulnerability reporting (Security tab, 'Report a vulnerability'), not in a public issue. Include the version or commit, what you did, and what you saw. +Please report a vulnerability privately through this repository's private vulnerability reporting (Security tab, 'Report a vulnerability', or ), not in a public issue. Include the version or commit, what you did, and what you saw. In scope: anything that exposes the user's profile, requests or replies; sends data the user did not choose to send; or weakens the encryption of the state file.