SECURITY.md refresh
Author: lsm5Created Oct 27, 2025Updated Sep 14, 2026
bubblewrap's SECURITY.md points to the no-longer maintained (apart from the release-* branches) c/common repo's SECURITY.md file which mentions emailing podman's security mailing list. So, podman's mailing list will end up receiving any security issues in bubblewrap.
Suggest having a separate email / reporting channel dedicated to bubblewrap.
Source: containers/bubblewrap