Changes between Version 5 and Version 6 of SecurityTeam

Timestamp:

Mar 3, 2025, 12:20:37 PM (10 hours ago)

Author:

Natalia Bidart

Comment:

Added bug bounty details skeleton.

SecurityTeam

@@ -31 +31 @@
 Hello,
 
-Thank you for your report. This mailing list is intended for reporting security issues related to the Django web framework, rather than its website. I will forward your concern to our Ops team, but you can consider this issue closed.
+Thank you for your report. This mailing list is intended for reporting security issues related to the Django web framework, rather than its website, so you can consider this issue closed.
 
 For more information on how the Django security team evaluates reports, please see: https://docs.djangoproject.com/en/dev/internals/security/.
@@ -47 +47 @@
 Thanks for your understanding!
 
+== Bug Bounty program scope ==
+
+Hello,
+
+Thank you for your email. Django has a bug bounty program, its details can be read here: https://hackerone.com/django, but please note that the bounty only applies to security issues found in the Django web framework, rather than to the djangoproject.com or any other website built with Django.
+
+Kind regards, the Django Security Team.
+
 == Confirmation of vulnerability ==