docs: add notes about reporting security issues (nuxt#4895)

Co-authored-by: Daniel Roe <daniel@roe.dev>
larbish · Jun 17, 2022 · 128b32a · 128b32a
1 parent 9be0be2
commit 128b32a
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,10 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+To report a vulnerability, please send an email to **security@nuxtjs.org** or submit it for a bounty via [Huntr](https://huntr.dev/bounties/disclose/?target=https://github.com/nuxt/framework).
+
+All security vulnerabilities will be promptly verified and addressed. 
+
+While the discovery of new vulnerabilities is rare, we also recommend always using the latest versions of Nuxt and other dependencies by maintaining lock files (`yarn.lock`, `package-lock.json` and `pnpm-lock.yaml`) in order to ensure your application remains as secure as possible.
+