From 5811666c60718a5b4d362cc9dee5fedfc5abfb33 Mon Sep 17 00:00:00 2001 From: Diana Lau Date: Tue, 29 Mar 2022 10:15:46 -0400 Subject: [PATCH] docs: add SECURITY.md Signed-off-by: Diana Lau --- SECURITY.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..0961858 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,19 @@ +# Security Policy + +## Security advisories + +Security advisories can be found on the +[LoopBack website](https://loopback.io/doc/en/sec/index.html). + +## Reporting a vulnerability + +If you think you have discovered a new security issue with any LoopBack package, +**please do not report it on GitHub**. Instead, send an email to +[security@loopback.io](mailto:security@loopback.io) with the following details: + +- Full description of the vulnerability. +- Steps to reproduce the issue. +- Possible solutions. + +If you are sending us any logs as part of the report, then make sure to redact +any sensitive data from them. \ No newline at end of file