# Coordinated Vulnerability Disclosure Policy

> **IMPORTANT**: *DO NOT* open public issues on this repository for security
> vulnerabilities.

---

## Canonical Policies

Our canonical policies are maintained here:

- **Security Policy (reporting process, scope, disclosure standards):**  
  https://github.com/cosmos/security/blob/main/SECURITY.md

- **Release & Maintenance Policy (supported versions, lifecycle, EOL):**  
  https://github.com/cosmos/security/blob/main/POLICY.md

- **HackerOne Bug Bounty Program:**  
  https://hackerone.com/cosmos

All vulnerability scope, supported versions, lifecycle timelines, and reporting
procedures are governed by the Security Policy and Release & Maintenance Policy
linked above.

---

## Reporting a Vulnerability

Security vulnerabilities must be reported via:

- **HackerOne:** https://hackerone.com/cosmos

Please refer to the Security Policy for full reporting and disclosure details.
