From 8be8b94793792dc3830c13c6bdee325faefc4bd7 Mon Sep 17 00:00:00 2001 From: Nikita Shulga Date: Thu, 11 Sep 2025 16:30:26 +0000 Subject: [PATCH] Update SECURITY.md with reporting guidelines (#162608) Added clarification that all reports will be disclosed within 90 days Pull Request resolved: https://github.com/pytorch/pytorch/pull/162608 Approved by: https://github.com/seemethere, https://github.com/albanD --- SECURITY.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/SECURITY.md b/SECURITY.md index 3baa145df795..16d72ef1ea08 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -16,6 +16,8 @@ However, if you believe you have found a security vulnerability in PyTorch, we e Please report security issues using https://github.com/pytorch/pytorch/security/advisories/new +All reports submitted thru the security advisories mechanism would **either be made public or dismissed by the team within 90 days of the submission**. If advisory has been closed on the grounds that it is not a security issue, please do not hesitate to create an [new issue](https://github.com/pytorch/pytorch/issues/new?template=bug-report.yml) as it is still likely a valid issue within the framework. + Please refer to the following page for our responsible disclosure policy, reward guidelines, and those things that should not be reported: https://www.facebook.com/whitehat