[Docs] SECURITY.md does not link to the vulnerability disclosure form or GitHub Security Advisories flow

[grantfox-oss]

Join our community: https://t.me/+DOylgFv1jyJlNzM0

Why this matters

SECURITY.md describes the supported versions and general policy but does not explain the concrete mechanism (email vs GitHub Security Advisories) a researcher should use to privately report a vulnerability, which risks a report landing in a public issue instead.

Acceptance criteria

• Add explicit instructions for reporting via GitHub Security Advisories or a listed contact
• Cross-link SECURITY.md from CONTRIBUTING.md

Files to touch

• SECURITY.md
• CONTRIBUTING.md

Out of scope

Does not change the actual disclosure/triage process itself.

[akprinciple]

Kindly assign this issue to me. I can get it fixed as soon as possible

[shinorh247]

@shinorh247 has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi maintainer no one has applied for this issue pls grant me to work on it

ℹ️ Repo Maintainers: To accept this application, review their application or assign @shinorh247 to this issue.

[Chidimj]

@Chidimj has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Good day Team, can i please work on this?

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Chidimj to this issue.

[Bigdaddyobamo]

@Bigdaddyobamo has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hello maintainer, could you please grant me access to this issue?

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Bigdaddyobamo to this issue.

[drips-wave]

Congratulations, @Chidimj! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @Chidimj: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[drips-wave]

This issue has been completed by @Chidimj as part of the Stellar Wave Program's 7th Wave 🥳

😎 @Chidimj: You earned 200 Points for completing this issue! After the current Wave ends, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here. You can also Leave a review to share your experience working on this issue.

🧑‍💻 Repo maintainers: How'd the contributor do? Leave a review to share your experience working with them.