From a036b9f40b1369c2a6a838dc68a4ebcd4f1fbcd9 Mon Sep 17 00:00:00 2001
From: Michael Marshall <mmarshall@apache.org>
Date: Tue, 15 Mar 2022 00:17:50 -0500
Subject: [PATCH] Update reporting a vulnerability documentation

---
 site2/website-next/src/pages/community.js |  1 +
 site2/website-next/src/pages/contact.js   | 17 +++++++++++++++++
 2 files changed, 18 insertions(+)

diff --git a/site2/website-next/src/pages/community.js b/site2/website-next/src/pages/community.js
index 3eae7775c14f..2927b79b76d0 100644
--- a/site2/website-next/src/pages/community.js
+++ b/site2/website-next/src/pages/community.js
@@ -222,6 +222,7 @@ export default function Community(props) {
                   <div className="sm:w-2/3">
                   <h3>Reporting a Vulnerability</h3>
                   <p>To report a vulnerability for Pulsar, contact the <a className="secondary-cta" href="https://www.apache.org/security/projects.html" target="_blank">Apache Security Team</a>.</p>
+                  <p>The process for reporting a vulnerability is outlined <a className="secondary-cta" href="https://www.apache.org/security/" target="_blank">here</a>. When reporting a vulnerability to <a className="secondary-cta" href="mailto:security@apache.org" target="_blank">security@apache.org</a>, you can copy your email to <a className="secondary-cta" href="mailto:private@pulsar.apache.org" target="_blank">private@pulsar.apache.org</a> to send your report to the Apache Pulsar Project Management Committee. This is a private mailing list.</p>
                   </div>
                 </div>
               </div>
diff --git a/site2/website-next/src/pages/contact.js b/site2/website-next/src/pages/contact.js
index 3f2c7aba1f40..33cb39df9a21 100644
--- a/site2/website-next/src/pages/contact.js
+++ b/site2/website-next/src/pages/contact.js
@@ -55,6 +55,23 @@ export default function page(props) {
             <Translate>Mailing Lists</Translate>
           </h2>
           <MailTable data={mailingLists}></MailTable>
+          <h2>
+            <translate>
+              Reporting a Vulnerability
+            </translate>
+          </h2>
+          <p>
+            To report a vulnerability for Pulsar, contact the <a href="https://www.apache.org/security/projects.html" target="_blank">Apache Security Team</a>.
+          </p>
+          <p>
+            <translate>The process for reporting a vulnerability is outlined </translate>
+            <a href="https://www.apache.org/security/" target="_blank">here</a>
+            <translate>. When reporting a vulnerability to </translate>
+            <a href="mailto:security@apache.org" target="_blank">security@apache.org</a>
+            <translate>, you can copy your email to </translate>
+            <a href="mailto:private@pulsar.apache.org" target="_blank">private@pulsar.apache.org</a>
+            <translate> to send your report to the Apache Pulsar Project Management Committee. This is a private mailing list.</translate>
+          </p>
           <h2>
             <Translate>Stack Overflow</Translate>
           </h2>