diff --git a/.github/SECURITY.md b/.github/SECURITY.md index 510d7a50..e6dd1bb1 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -4,7 +4,7 @@ Only the latest non-alpha/beta version is supported. -Fix time is approximately from 1 to 3 days. +Fix time is approximately from 1 to 5 days. ## Reporting a Vulnerability @@ -12,6 +12,8 @@ Transparency and Security are vital. All builds are made using GitHub Actions only and for macOS Arm64 using CirrusCI. No part of the releases is published from any local source, the release process is fully automated from start to finish. -Please report security vulnerabilities to bigcat88@icloud.com with `Pillow-Heif` in the subject line. -If there is no response within 24 hours, then create an Issue, -without technical details, to report on the previously sent mail. +Please report security issues using GitHub's `Private vulnerability` reporting feature. + +You are also welcome to report security vulnerabilities via email to `bigcat88@icloud.com`, ensuring to include `Pillow-Heif` in the subject line. + +If you do not receive a response within 48 hours, please create an issue without including technical details—to notify about it.