Clarify handling of duplicate vulnerability reports

2026-04-17 21:10:26 +09:00
parent 41f6e6b995
commit 3610afd52b
1 changed files with 5 additions and 0 deletions
@@ -10,3 +10,8 @@ If you have anything else you want to report privately to developers, send us an

 * [xrdp-core@googlegroups.com](mailto:xrdp-core@googlegroups.com)

+## Handling of Duplicate Reports
+
+Due to the high volume of vulnerability reports we receive, duplicate reports are handled on a first-come-first-served basis, even if discovered independently by different parties. Consequently, only the first reporter will be acknowledged in the public advisory.
+
+As reports remain confidential until public disclosure, reporters may not know if they are the first to submit. We appreciate your understanding.