Merge pull request #5269 from UlisesGascon/patch-1

docs: add security escalation policy
This commit is contained in:
Nick O'Leary
2025-09-16 11:55:07 +01:00
committed by GitHub

View File

@@ -3,3 +3,9 @@
## Reporting a Vulnerability
Please report any potential security issues to `team@nodered.org`. This will notify the core project team who will respond accordingly.
## Escalation
If you do not receive an acknowledgement of your report within 6 business days, or if you cannot find a private security contact for the project, you may escalate to the OpenJS Foundation CNA at `security@lists.openjsf.org`.
If the project acknowledges your report but does not provide any further response or engagement within 14 days, escalation is also appropriate.