1# Security Policy 2 3## Reporting a Vulnerability 4 5We encourage responsible disclosure of security vulnerabilities. If you 6find something suspicious, we encourage and appreciate your report. 7 8The preferred way to report a vulnerability is to use the 9**"Report a vulnerability"** button under the **Security** tab of the 10OpenZFS GitHub repository. This creates a private communication channel 11between you and the maintainers, allowing us to review the report 12confidentially and respond as quickly as possible. 13 14Please include, if possible: 15 16- A clear description of the issue 17- Steps to reproduce the problem 18- Affected versions or branches 19- Any proof of concept, logs, or screenshots 20- Your assessment of the potential impact 21 22## What to Expect 23 24- We will review security reports as soon as practical. 25- We may ask follow-up questions to better understand the issue. 26- Please allow time for investigation and coordination before public 27 disclosure. 28- If the issue is confirmed, we will work on a fix and release a security 29 update as needed for supported OpenZFS versions. 30