diff --git a/SECURITY.md b/SECURITY.md index 1003574331..fded106604 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,5 +1,9 @@ # Security Policy +:warning: Do not report memory or resource leaks as security issues or exploits. Those are bugs. Report them via [Issues](https://github.com/ReactiveX/RxJava/issues) or better yet, post a **Pull Request**. + +:information_source: with the advent of AI tools, high star projects like ours are prime target for trophy hunters. If you spam our repo with miscategorized exploits given our context, you will be banned after 1-3 warnings. + If you have discovered a security vulnerability in this project, please report it privately. **Do not disclose it as a public issue.** This gives us time to work with you to fix the issue before public exposure, reducing the chance that the exploit will be used before a patch is released. Please disclose it at [security advisory](https://github.com/ReactiveX/RxJava/security/advisories/new).