16 lines
1.0 KiB
Markdown
16 lines
1.0 KiB
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
The .NET and ASP.NET Core support policy, including supported versions can be found at the [.NET Support Policy Page](https://dotnet.microsoft.com/platform/support/policy/dotnet-core).
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Security issues and bugs should be reported privately to the Microsoft Security Response Center (MSRC), either by emailing <secure@microsoft.com> or via the portal at <https://msrc.microsoft.com>.
|
|
You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your
|
|
original message. Further information, including the MSRC PGP key, can be found in the [MSRC Report an Issue FAQ](https://www.microsoft.com/msrc/faqs-report-an-issue).
|
|
|
|
Reports via MSRC may qualify for the .NET Bug Bounty. Details of the .NET Bug Bounty including terms and conditions are at [https://aka.ms/corebounty](https://aka.ms/corebounty).
|
|
|
|
Please do not open issues for anything you think might have a security implication.
|