This policy applies to every OpenWave India repository that doesn't have its own SECURITY.md.

Please do not open a public issue for security problems.

Use GitHub's private vulnerability reporting: open the affected repository's Security tab and choose Report a vulnerability. If that option isn't available, contact an organization owner privately through GitHub and say that you have a security report, without including the details.

Please include:

• what the problem is and where it is (file, command, or input);
• steps to reproduce, ideally with a minimal example;
• the impact you expect.

You should receive an acknowledgement within a week. We will keep you informed of the fix and credit you in the release notes if you wish.

OpenWave India projects are in early development. Security fixes are made on the main branch and included in the next release.