We should consider adding a SECURITY.md document to the Koha git repository to give people insight into how to report security issues for Koha. https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository
Created attachment 184701 [details] [review] Bug 40527: Initial draft of SECURITY.md This patch includes an initial draft of a proposed SECURITY.md guideline for reporting security bugs to Koha.