Merge pull request #3787 from metalefty/security

Clarify handling of duplicate vulnerability reports
2026-04-17 21:53:46 +09:00
parent 43fa055ec4 3610afd52b
commit f6d3d12137
1 changed files with 5 additions and 0 deletions
@@ -10,3 +10,8 @@ If you have anything else you want to report privately to developers, send us an
 * [xrdp-core@googlegroups.com](mailto:xrdp-core@googlegroups.com)
 ## Handling of Duplicate Reports
 Due to the high volume of vulnerability reports we receive, duplicate reports are handled on a first-come-first-served basis, even if discovered independently by different parties. Consequently, only the first reporter will be acknowledged in the public advisory.
 As reports remain confidential until public disclosure, reporters may not know if they are the first to submit. We appreciate your understanding.