From cb9e072655d9d2e0f2033b01b57497a0417e74cb Mon Sep 17 00:00:00 2001 From: Adir Shitrit Date: Sat, 8 Nov 2025 11:49:12 +0200 Subject: [PATCH] update security guidelines and vulnerability reporting --- SECURITY.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 32be079..f07c598 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -65,6 +65,7 @@ We follow responsible disclosure practices: ### Vulnerability Categories We're Interested In **High Priority:** + - Memory safety violations - Privilege escalation - Code injection vulnerabilities @@ -72,15 +73,17 @@ We follow responsible disclosure practices: - Sensitive data exposure **Medium Priority:** + - Denial of service - Information disclosure - Logic flaws in detection algorithms **Out of Scope:** + - Issues requiring physical access - Social engineering attacks - Third-party dependency vulnerabilities (unless exploitable through Ghost) --- -*Last updated: November 2025* \ No newline at end of file +*Last updated: November 2025*