Merge pull request #3787 from metalefty/security

Clarify handling of duplicate vulnerability reports
This commit is contained in:
metalefty
2026-04-17 21:53:46 +09:00
committed by GitHub
+5
View File
@@ -10,3 +10,8 @@ If you have anything else you want to report privately to developers, send us an
* [xrdp-core@googlegroups.com](mailto:xrdp-core@googlegroups.com)
## Handling of Duplicate Reports
Due to the high volume of vulnerability reports we receive, duplicate reports are handled on a first-come-first-served basis, even if discovered independently by different parties. Consequently, only the first reporter will be acknowledged in the public advisory.
As reports remain confidential until public disclosure, reporters may not know if they are the first to submit. We appreciate your understanding.