calibre/SECURITY.md
ron 6b7acd199f Fix typos, grammar errors, and incorrect references across documentation
Fix ~85 issues across 28 documentation files including misspellings,
subject-verb agreement errors, incorrect articles, missing punctuation,
and one incorrect URL scheme reference in url_scheme.rst.
2026-02-11 01:18:31 -05:00

22 lines
883 B
Markdown

# Security Policy
## Supported Versions
There are no security-specific releases of calibre. Security bugs are fixed
and released just like all other bugs.
## Reporting a vulnerability
To report security vulnerabilities, open a normal bug report in the
[calibre bug tracker](https://calibre-ebook.com/bugs) and mark it private.
Additionally, you can use GitHub Private security advisories against this
repository to report issues.
Note that I will generally respond to security communication within 72 hours. Once
the bug is confirmed, it will be fixed or at least mitigated within another 72
hours, at which time the fix will typically be committed to master and hence be
public. That timeline might be extended based on the severity of the issue and the
current state of master in terms of making a new release. If so, it will be
done in consultation with the issue reporter.