]> git.ipfire.org Git - thirdparty/curl.git/blame - SECURITY.md
remote-header-name.d: mention that filename* is not supported
[thirdparty/curl.git] / SECURITY.md
CommitLineData
ad9bc597 1<!--
2bc1d775 2Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
ad9bc597
MM
3
4SPDX-License-Identifier: curl
5-->
6
b9a6130d
DS
7# Security Policy
8
fd1ce3d4 9See [SECURITY-PROCESS](docs/SECURITY-PROCESS.md) for full details.
b9a6130d
DS
10
11## Reporting a Vulnerability
12
fd1ce3d4
DS
13If you have found or just suspect a security problem somewhere in curl or
14libcurl, report it on [HackerOne](https://hackerone.com/curl).
b9a6130d 15
69d5d183 16We treat security issues with confidentiality until controlled and disclosed responsibly.