This security policy only applies to the Jisc CTI Docker images and their generation, for reports related to MISP see the MISP Security Policy.

For information on reporting vulnerabilities please see the Jisc Vulnerability disclosure policy.