From 494e9a7d3361fde8057ec20d389bc3f0cb588616 Mon Sep 17 00:00:00 2001 From: Classic298 <27028174+Classic298@users.noreply.github.com> Date: Fri, 12 Jun 2026 23:46:43 +0200 Subject: [PATCH] Add a security-reporting link to the issue chooser MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit With blank issues disabled, the New Issue chooser only offered Bug Report and Feature Request, leaving security reporters no obvious route and nudging them toward filing vulnerabilities as public issues. Add a contact_links entry that points to the Security Policy (/security/policy), where the "Report a vulnerability" button opens a private GitHub advisory — keeping security reports out of public issues. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/ISSUE_TEMPLATE/config.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml index 3ba13e0cec..1f58c1dbcb 100644 --- a/.github/ISSUE_TEMPLATE/config.yml +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -1 +1,5 @@ blank_issues_enabled: false +contact_links: + - name: 🔒 Report a Security Vulnerability + url: https://github.com/open-webui/open-webui/security/policy + about: Do NOT open a public issue for security vulnerabilities, suspected vulnerabilities, or any security-related concern. Please review our Security Policy and report privately via the "Report a vulnerability" button so it can be handled as a private advisory.