Create SECURITY.md

Highly inspired by ExpressJS security policy.

SECURITY.md

@@ -0,0 +1,20 @@
+# Security Policy
+This document outlines security procedures and general policies for the EJS template engine project
+
+## Supported Versions
+
+The current supported version.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 3.x.x   | :white_check_mark: |
+
+## Reporting a Vulnerability
+The EJS team and community take all security bugs in EJS seriously. 
+We appreciate your efforts and responsible disclosure and will make every effort to acknowledge your contributions.
+
+Report security bugs by emailing the lead maintainer in the Readme.md file.
+To ensure the timely response to your report, please ensure that the entirety of the report is contained within the email body and not solely behind a web link or an attachment.
+
+The EJS team will then evaluate your report and will reply with the next steps in handling your report and may ask for additional information or guidance.
+