SECURITY.md

Reporting Security Vulnerabilities

When to report

First check Important advisories of known security vulnerabilities in Sonatype products to see if this has been previously reported.

How to report

If you believe you have found a security vulnerability, please use our Bug Bounty Program to disclose responsibly.