From d15b6b794460c35dfb6355dd43f8463d69697f90 Mon Sep 17 00:00:00 2001 From: pooya parsa Date: Mon, 9 May 2022 16:39:46 +0200 Subject: [PATCH 1/3] Create SECURITY.md --- SECURITY.md | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000000..86eaf7474e6 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,10 @@ +# Security Policy + +# Reporting a Vulnerability + +To report a vulnerability, please send an email to **security@nuxtjs.org**. + +All security vulnerabilities will be promptly verified and addressed. + +While the discovery of new vulnerabilities is rare, we also recommend always using the latest versions of Nuxt and other dependencies by maintaining lock files (`yarn.lock`, `package-lock.json` and `pnpm-lock.yaml`) in order to ensure your application remains as secure as possible. + From 929511af71ef4825477e6ac8a73816d95c8336fd Mon Sep 17 00:00:00 2001 From: Daniel Roe Date: Thu, 16 Jun 2022 22:26:23 +0100 Subject: [PATCH 2/3] docs: add line about huntr --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 86eaf7474e6..7e47c4e4a66 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,7 +2,7 @@ # Reporting a Vulnerability -To report a vulnerability, please send an email to **security@nuxtjs.org**. +To report a vulnerability, please send an email to **security@nuxtjs.org** or submit it for a bounty via [Huntr](https://huntr.dev/bounties/disclose/?target=https://github.com/nuxt/framework). All security vulnerabilities will be promptly verified and addressed. From 75acf2b41f7225723eb29ea6fc446a719c097b68 Mon Sep 17 00:00:00 2001 From: Daniel Roe Date: Thu, 16 Jun 2022 22:27:06 +0100 Subject: [PATCH 3/3] Update SECURITY.md --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 7e47c4e4a66..a2249a1ee5d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,6 +1,6 @@ # Security Policy -# Reporting a Vulnerability +## Reporting a Vulnerability To report a vulnerability, please send an email to **security@nuxtjs.org** or submit it for a bounty via [Huntr](https://huntr.dev/bounties/disclose/?target=https://github.com/nuxt/framework).