Merge pull request #3214 from tornadoweb/bdarnell-patch-1

Create security policy document
tornadoweb · Jan 5, 2023 · b726f6d · b726f6d
2 parents 1430f17 + b92e517
commit b726f6d
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+In general, due to limited maintainer bandwidth, only the latest version of
+Tornado is supported with patch releases. Exceptions may be made depending
+on the severity of the bug and the feasibility of backporting a fix to
+older releases. 
+
+## Reporting a Vulnerability
+
+Tornado uses GitHub's security advisory functionality for private vulnerability
+reports. To make a private report, use the "Report a vulnerability" button on
+https://github.com/tornadoweb/tornado/security/advisories