From 4ff385946d119d6c312a012877b979300c865cda Mon Sep 17 00:00:00 2001 From: Ryan Cavanaugh Date: Thu, 17 Sep 2026 21:08:18 +0000 Subject: [PATCH] Update SECURITY.md with TypeScript security properties (#64315) Co-authored-by: Jake Bailey <5341706+jakebailey@users.noreply.github.com> --- SECURITY.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/SECURITY.md b/SECURITY.md index d8e8bb9ca18..fa5c363fcc7 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,3 +1,8 @@ +## TypeScript Security Properties + +Please refer to [TypeScript Security Properties](https://github.com/microsoft/TypeScript/wiki/tsc-Security-Properties) prior to submitting a security report. +Specifically, **crashes, stack overflows, nonlinear performance, and hangs** are generally not considered vulnerabilities unless they result in arbitrary code execution, and should be reported through the [normal issue flow](https://github.com/microsoft/TypeScript/issues/new/choose) instead. + ## Security