SECURITY.md: add scope description.

4e504eac · Yukihiro "Matz" Matsumoto · d96f53f8 · 4e504eac
Unverified Commit 4e504eac authored Oct 01, 2021 by Yukihiro "Matz" Matsumoto
Hide whitespace changes
Inline Side-by-side

Showing with 13 additions and 0 deletions

SECURITY.md SECURITY.md +13 -0

No files found.
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -3,3 +3,16 @@
 ## Reporting a Vulnerability

 If you have any security concern, contact <matz@ruby.or.jp>.
+
+## Scope
+
+We consider following issues as vulnerabilities:
+
+* Remote code execution
+* Crash caused by a valid Ruby script
+
+We *don't* consider following issues as vulnerabilities:
+
+* Runtime C undefined behavior (including integer overflow)
+* Crash caused by misused API
+* Crash caused by tweaked compiled binary