VULN-DISCLOSURE-POLICY.md: push reports to the web form

Closes #20515

diff --git a/docs/VULN-DISCLOSURE-POLICY.md b/docs/VULN-DISCLOSURE-POLICY.md
index da767d65acdf1623fc61fb5eaa72f7c76f64a58a..94cdc1a5ceae3929ad97ae53bd1e88557a32bcd3 100644 (file)
--- a/docs/VULN-DISCLOSURE-POLICY.md
+++ b/docs/VULN-DISCLOSURE-POLICY.md
@@ -31,9 +31,8 @@ announcement.
 
 - The person discovering the issue, the reporter, reports the vulnerability to
   the curl project. Do this [on
-  GitHub](https://github.com/curl/curl/security/advisories) or send an email
-  to `security at curl.se`. Such submissions reach a handful of selected and
-  trusted people.
+  GitHub](https://github.com/curl/curl/security/advisories). Such submissions
+  reach a handful of selected and trusted people.
 
 - Messages that do not relate to the reporting or managing of an undisclosed
   security vulnerability in curl or libcurl are ignored and no further action