From aa44c63f6d6b4f614d25dddba72fd31f2490bf0d Mon Sep 17 00:00:00 2001 From: John Coffey Date: Fri, 6 Nov 2026 01:19:07 -0700 Subject: [PATCH] SECURITY.md: GitHub private reporting works too Private vulnerability reporting is on for the GitHub copy, so its "Report a vulnerability" form is a second private route besides email. --- SECURITY.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/SECURITY.md b/SECURITY.md index d4cd4cb3..3259102d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -24,6 +24,10 @@ Report it privately by email to: **securityATcoffeylabsDOTorg** +Or use **Report a vulnerability** on the +[GitHub copy's Security tab](https://github.com/inbuxa/inbuxa-server/security/advisories/new), +which reaches the same people privately. + Include as much as you can of: - what the vulnerability is, and what it lets someone do; -- 2.54.0