We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent d4aabb9 commit 0e9bad9Copy full SHA for 0e9bad9
SECURITY.md
@@ -4,9 +4,11 @@
4
5
Report security bugs in Node.js via [HackerOne](https://hackerone.com/nodejs).
6
7
-Your report will be acknowledged within 5 days, and you'll receive a more
8
-detailed response to your report within 10 days indicating the next steps in
9
-handling your submission.
+Normally your report will be acknowledged within 5 days, and you'll receive
+a more detailed response to your report within 10 days indicating the
+next steps in handling your submission. These timelines may extend when
10
+our triage volunteers are away on holiday, particularly at the end of the
11
+year.
12
13
After the initial reply to your report, the security team will endeavor to keep
14
you informed of the progress being made towards a fix and full announcement,
0 commit comments