From: Ben Darnell <ben@bendarnell.com>
Date: Thu, 5 Jan 2023 16:40:24 +0000 (-0500)
Subject: Create security policy document
X-Git-Tag: v6.3.0b1~15^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b92e5178421bae2ffe830a6160857fd57caaf35c;p=thirdparty%2Ftornado.git

Create security policy document

Fixes #3099
---

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..5cd35cdfc
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+In general, due to limited maintainer bandwidth, only the latest version of
+Tornado is supported with patch releases. Exceptions may be made depending
+on the severity of the bug and the feasibility of backporting a fix to
+older releases. 
+
+## Reporting a Vulnerability
+
+Tornado uses GitHub's security advisory functionality for private vulnerability
+reports. To make a private report, use the "Report a vulnerability" button on
+https://github.com/tornadoweb/tornado/security/advisories