From b92e5178421bae2ffe830a6160857fd57caaf35c Mon Sep 17 00:00:00 2001 From: Ben Darnell Date: Thu, 5 Jan 2023 11:40:24 -0500 Subject: [PATCH] Create security policy document Fixes #3099 --- SECURITY.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..5cd35cdf --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,14 @@ +# Security Policy + +## Supported Versions + +In general, due to limited maintainer bandwidth, only the latest version of +Tornado is supported with patch releases. Exceptions may be made depending +on the severity of the bug and the feasibility of backporting a fix to +older releases. + +## Reporting a Vulnerability + +Tornado uses GitHub's security advisory functionality for private vulnerability +reports. To make a private report, use the "Report a vulnerability" button on +https://github.com/tornadoweb/tornado/security/advisories