From d8f8de7f1fc4fd300d4437a1a23559e1a8f043e3 Mon Sep 17 00:00:00 2001 From: Andrew Murray Date: Thu, 9 Apr 2026 11:31:40 +1000 Subject: [PATCH] Update README with revised security policy --- README.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 04c9ae8abd8..c6d09a821a5 100644 --- a/README.md +++ b/README.md @@ -106,4 +106,8 @@ The core image library is designed for fast access to data stored in a few basic ## Report a vulnerability -To report a security vulnerability, please follow the procedure described in the [Tidelift security policy](https://tidelift.com/docs/security). +To report sensitive vulnerability information, report it [privately on GitHub](https://github.com/python-pillow/Pillow/security/advisories/new). + +If you cannot use GitHub, use the [Tidelift security contact](https://tidelift.com/security). Tidelift will coordinate the fix and disclosure. + +DO NOT report sensitive vulnerability information in public.