diff --git a/SECURITY.md b/SECURITY.md index f7095af2e..90df052c6 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,10 +2,12 @@ ## Reporting a Vulnerability -Please [open a draft security advisory](https://github.com/spring-projects/spring-data-couchbase/security/advisories/new) if you need to disclose and discuss a security issue in private with the Spring Data team. -Note that we only accept reports against [supported versions](https://spring.io/projects/spring-data#support). +Couchbase maintains Spring Data Couchbase. Please report security issues to Couchbase, not to the Spring team. -For more details, check out our [security policy](https://spring.io/security-policy). +Send the details of the issue by email to [security@couchbase.com](mailto:security@couchbase.com). The Couchbase security team will assess the report and contact you. +Please do not open a public GitHub issue for a security problem. + +For more information, see the [Couchbase support page](https://docs.couchbase.com/cmos/current/support.html). ## JAR signing