diff --git a/SECURITY.md b/SECURITY.md index 1778fd9d60010a..6b009001faf3e0 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -7,12 +7,12 @@ used before a patch is released. You may submit the report in the following ways: -- send an email to hello@mrdoob.com. +- Send an email to hello@mrdoob.com. Please provide the following information in your report: -- A description of the vulnerability and its impact -- How to reproduce the issue +- A description of the vulnerability and its impact. +- How to reproduce the issue. This project is maintained by volunteers on a reasonable-effort basis. As such, we ask that you give us 90 days to work on a fix before public exposure.