| 1 | # Security Policy
|
| 2 |
|
| 3 | ## Security advisories
|
| 4 |
|
| 5 | Security advisories can be found on the
|
| 6 | [LoopBack website](https://loopback.io/doc/en/sec/index.html).
|
| 7 |
|
| 8 | ## Reporting a vulnerability
|
| 9 |
|
| 10 | If you think you have discovered a new security issue with any LoopBack package,
|
| 11 | **please do not report it on GitHub**. Instead, send an email to
|
| 12 | [security@loopback.io](mailto:security@loopback.io) with the following details:
|
| 13 |
|
| 14 | - Full description of the vulnerability.
|
| 15 | - Steps to reproduce the issue.
|
| 16 | - Possible solutions.
|
| 17 |
|
| 18 | If you are sending us any logs as part of the report, then make sure to redact
|
| 19 | any sensitive data from them. |
| \ | No newline at end of file |