SECURITY.md: say we don't forward reports upstream #281

Merged
jcoffey-dev merged 1 commits from docs/security-upstream-reports into main 2026-10-31 21:36:29 +00:00
1 Commits
Author SHA1 Message Date
jcoffey-dev 8e890431fc SECURITY.md: say we don't forward reports upstream
ci / fork-checks (pull_request) Skipped
ci / build (pull_request) Skipped
github/ci (branch) GitHub Actions
ci / github (pull_request) Successful in 10m6s
A report that also affects upstream Stalwart is fixed here, and the
reporter is told so they can report it to Stalwart Labs themselves.
The old text promised to pass reports on, which we don't do.
2026-10-31 14:16:37 -07:00