|
| 1 | +#Security Policy |
| 2 | + |
| 3 | +##Supported Versions |
| 4 | + |
| 5 | +The .NET Core and ASP.NET Core support policy, including supported versions can be found at the[.NET Core Support Policy Page](https://dotnet.microsoft.com/platform/support/policy/dotnet-core). |
| 6 | + |
| 7 | +##Reporting a Vulnerability |
| 8 | + |
| 9 | +Security issues and bugs should be reported privately to the Microsoft Security Response Center (MSRC), either by emailingsecure@microsoft.com or via the portal athttps://msrc.microsoft.com. |
| 10 | +You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your |
| 11 | +original message. Further information, including the MSRC PGP key, can be found in the[MSRC Report an Issue FAQ](https://www.microsoft.com/en-us/msrc/faqs-report-an-issue). |
| 12 | + |
| 13 | +Reports via MSRC may qualify for the .NET Core Bug Bounty. Details of the .NET Core Bug Bounty including terms and conditions are at[https://aka.ms/corebounty](https://aka.ms/corebounty). |
| 14 | + |
| 15 | +Please do not open issues for anything you think might have a security implication. |