SECURITY.md: suggest CVSS v3.1 [ci skip]

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/SECURITY.md b/SECURITY.md
index f1b1b0fde4a13f29f942cc65c904d59ba365d9ba..dd69410b60545dfaa11d74249c3992cebc7fab71 100644 (file)
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -9,7 +9,7 @@ issue.
 # Which issues are security issues
 
 A metric we consult to assessing security vulnerabilities is
-the [CVSS](https://www.first.org/cvss) metric. Only vulnerabilities
+the [CVSS](https://www.first.org/cvss) v3.1 metric. Only vulnerabilities
 at the high or critical level are handled with this process.
 Issues of lower severity are managed separately, often with different
 estimated times of arrival (ETAs) and backport targets.