github.com/SagerNet/gvisor@v0.0.0-20210707092255-7731c139d75c/SECURITY.md (about)

     1  # Security and Vulnerability Reporting
     2  
     3  Sensitive security-related questions, comments, and reports should be sent to
     4  the [gvisor-security mailing list][gvisor-security-list]. You should receive a
     5  prompt response, typically within 48 hours.
     6  
     7  Policies for security list access, vulnerability embargo, and vulnerability
     8  disclosure are outlined in the [governance policy](GOVERNANCE.md).
     9  
    10  [gvisor-security-list]: https://groups.google.com/forum/#!forum/gvisor-security