Merge pull request #17 from xima-media/security-guidelines

docs: add security policy guidelines to SECURITY.md

Author: Konrad Michalik

SECURITY.md

@@ -0,0 +1,19 @@
+# Security Policy
+
+If you believe you have found a vulnerability in this project, please follow the guidelines below.
+
+> [!CAUTION]
+> Please do not create GitHub issues for security vulnerabilities!
+
+## Reporting a Vulnerability
+
+Please contact [hej@konradmichalik.dev](mailto:hej@konradmichalik.dev) insted.
+Your report should include the following information:
+
+- The exact version or version range you analyzed.
+- The TYPO3 version used during your analysis.
+- A step-by-step description of how to exploit the potential vulnerability.
+
+> [!TIP]
+> If you suspect a critical vulnerability, you may also contact the _TYPO3 Security Team_. For further details, please
+> refer to  [TYPO3's Security Policy](https://github.com/TYPO3/typo3/blob/main/SECURITY.md).