We published a first version of our vulnerability disclosure and security process:
For all security researchers, your feedback on the policy and how we can improve it would be extremely valuable. Thanks in advance for any help! I’m hoping we can set a good example and influence other projects to adopt a similar policy.
P.S. Big thanks to Neha for her last post, it was timely and proved to be a very useful reference!