From 0cf571ba208aedd2a69452739875c24817862186 Mon Sep 17 00:00:00 2001
From: Daniel Schmidt <dsc@charlietango.dk>
Date: Tue, 14 Jul 2026 11:08:13 +0200
Subject: [PATCH] docs: use private vulnerability reporting

---
 SECURITY.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/SECURITY.md b/SECURITY.md
index 68903767..a89aa638 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -2,7 +2,8 @@
 
 ## Reporting a Vulnerability
 
-If you discover a security vulnerability within the `react-intersection-observer` package or have any security concerns, 
-please [create a new issue](https://github.com/thebuilder/react-intersection-observer/issues?q=sort%3Aupdated-desc+is%3Aissue+is%3Aopen) on the Github repository. 
+If you discover a security vulnerability within the `react-intersection-observer` package or have any security concerns,
+please [submit a private vulnerability report](https://github.com/thebuilder/react-intersection-observer/security/advisories/new).
+Do not open a public issue for an undisclosed vulnerability.
 
 We appreciate your responsible disclosure.