VULN-DISCLOSURE-POLICY.md: push reports to the web form

Closes #20515
This commit is contained in:
Daniel Stenberg 2026-02-04 11:50:06 +01:00
parent 0bfd2645ca
commit 0ccaf6c835
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2

View file

@ -31,9 +31,8 @@ announcement.
- The person discovering the issue, the reporter, reports the vulnerability to
the curl project. Do this [on
GitHub](https://github.com/curl/curl/security/advisories) or send an email
to `security at curl.se`. Such submissions reach a handful of selected and
trusted people.
GitHub](https://github.com/curl/curl/security/advisories). Such submissions
reach a handful of selected and trusted people.
- Messages that do not relate to the reporting or managing of an undisclosed
security vulnerability in curl or libcurl are ignored and no further action