2019-10-07 04:06:53 +00:00
|
|
|
# Security and Vulnerability Reporting
|
|
|
|
|
|
|
|
Sensitive security-related questions, comments, and reports should be sent to
|
|
|
|
the [gvisor-security mailing list][gvisor-security-list]. You should receive a
|
|
|
|
prompt response, typically within 48 hours.
|
|
|
|
|
|
|
|
Policies for security list access, vulnerability embargo, and vulnerability
|
2020-02-27 06:44:50 +00:00
|
|
|
disclosure are outlined in the [governance policy](GOVERNANCE.md).
|
2019-10-07 04:06:53 +00:00
|
|
|
|
|
|
|
[community]: https://gvisor.googlesource.com/community
|
|
|
|
[gvisor-security-list]: https://groups.google.com/forum/#!forum/gvisor-security
|