diff --git a/SECURITY.md b/SECURITY.md index 052cdba030..64219a6404 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -8,7 +8,7 @@ Only the latest Creditcoin node version will receive patches for known vulnerabi **DO NOT CREATE AN ISSUE** to report a security problem. -Go to https://github.com/gluwa/creditcoin/security/advisories and open a vulnerability report. Send an email to [security@gluwa.com](mailto:security@gluwa.com) and provide your GitHub username. The team will triage the issue from there. +Go to [https://github.com/gluwa/creditcoin/security/advisories/new](https://github.com/gluwa/creditcoin/security/advisories/new) and open a vulnerability report. Send an email to [security@gluwa.com](mailto:security@gluwa.com) and provide your GitHub username. The team will triage the issue from there. For security reasons, DO NOT include attachments or provide detail sufficient for exploitation regarding the security issue in this email. Instead, wait for the advisory to be created, and **provide any sensitive details in the private GitHub advisory**.