kitsune/SECURITY.md

Security policy

Warning At this time, Kitsune is in early stages of development. We don't recommend setting up an instance yet.

Reporting a vulnerability

Please DO NOT report security vulnerabilities via the public issue tracker

To report a vulnerability, please navigate to the Advisories page and click on "Report a vulnerability".
You will then be taken to a form where you can file the report.

Please include as much information as possible in your report:

• The git revision you are running
• The operating system Kitsune is running on
• Any backtraces (if applicable)
• Reproduction steps