From a4f7ec1fb39b1153e921c95ab2d3ef9407b7ed76 Mon Sep 17 00:00:00 2001 From: Classic298 <27028174+Classic298@users.noreply.github.com> Date: Mon, 29 Jun 2026 08:36:44 +0200 Subject: [PATCH] Chore: Add a security-reporting link to the issue chooser (#26007) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Add a security-reporting link to the issue chooser With blank issues disabled, the New Issue chooser only offered Bug Report and Feature Request, leaving security reporters no obvious route and nudging them toward filing vulnerabilities as public issues. Add a contact_links entry that points to the Security Policy (/security/policy), where the "Report a vulnerability" button opens a private GitHub advisory — keeping security reports out of public issues. Co-Authored-By: Claude Opus 4.8 (1M context) * Update config.yml --------- Co-authored-by: Claude Opus 4.8 (1M context) --- .github/ISSUE_TEMPLATE/config.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml index 3ba13e0cec..abb131c930 100644 --- a/.github/ISSUE_TEMPLATE/config.yml +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -1 +1,5 @@ blank_issues_enabled: false +contact_links: + - name: 🔒 Report a Security Vulnerability + url: https://github.com/open-webui/open-webui/security + about: Do NOT open a public issue for security vulnerabilities, suspected vulnerabilities, or any security-related concern. Please review our Security Policy and report privately via the "Report a vulnerability" button so it can be handled as a private advisory.