@@ -77,3 +77,10 @@ the `news` label if you make a new package so we can know about it!
7777We are currently moving to a more aggresive release policy, so that you can get
7878what you contribute from Hackage fairly soon. However, note that prior to major
7979releases it may take some time in between releases.
80+
81+## Reporting security issues
82+
83+Please email haskell-servant-maintainers AT googlegroups DOT com. This group is
84+private, and accessible only to known maintainers. We will then discuss how to
85+proceed. Please do not make the issue public before we inform you that we have
86+a patch ready.