github.com/kovansky/hugo@v0.92.3-0.20220224232819-63076e4ff19f/SECURITY.md (about)

     1  ## Security Policy
     2  
     3  ### Reporting a Vulnerability
     4  
     5  Please report (suspected) security vulnerabilities to **[bjorn.erik.pedersen@gmail.com](mailto:bjorn.erik.pedersen@gmail.com)**. You will receive a response from us within 48 hours. If we can confirm the issue, we will release a patch as soon as possible depending on the complexity of the issue but historically within days.
     6  
     7  Also see [Hugo's Security Model](https://gohugo.io/about/security-model/).