romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-05 00:36:17 +03:00
Code Issues Projects Releases Packages Wiki Activity

docs/SECURITY-ADVISORY.md: how to write a curl security advisory

Browse source 
Closes #11080
This commit is contained in:
Daniel Stenberg 2023-05-07 18:33:57 +02:00
parent 62ba84a2ab
commit 5a7ae421c5
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
3 changed files with 132 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/SECURITY-PROCESS.md
View file

@ -55,7 +55,8 @@ announcement.
- Write a security advisory draft about the problem that explains what the
problem is, its impact, which versions it affects, solutions or workarounds,
when the release is out and make sure to credit all contributors properly.
Figure out the CWE (Common Weakness Enumeration) number for the flaw.
Figure out the CWE (Common Weakness Enumeration) number for the flaw. See
`SECURITY-ADVISSORY.md` for help on creating the advisory.
- Request a CVE number from
[HackerOne](https://docs.hackerone.com/programs/cve-requests.html)