Skip to content

security: add section on pre-release versions and reporting vulnerabilities #22

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
bjohansebas wants to merge 3 commits into
base: master
Choose a base branch
from
Open

security: add section on pre-release versions and reporting vulnerabilities #22

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
e9b3bbd
security: add section on pre-release versions and reporting vulnerabi…
bjohansebas May 28, 2025
e608b3b
update link
bjohansebas May 29, 2025
129854b
Merge branch 'master' into security
bjohansebas Jan 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,6 +60,12 @@ The lead maintainer will acknowledge your email within 48 hours and provide an i

If the security issue pertains to a third-party module that is not directly maintained within the Express ecosystem, please report it to the maintainers of that module.

## Pre-release Versions

Alpha and Beta releases are unstable and **not suitable for production use**.
Vulnerabilities found in pre-releases should be reported according to the [Reporting a Bug](#reporting-a-bug-or-security-vulnerability) section.
Due to the unstable nature of the branch it is not guaranteed that any fixes will be released in the next pre-release.

## Disclosure Policy

When the security team receives a security bug report, they will assign it to a
Expand Down