Please provide a link to the security release notice on your site. It must be a page that makes it clear that this is a security release, and that users need to update, not a page that just lists all the wonderful features of your extension. It is OK to make this a link to your product landing page, but this must include a prominently displayed notice of the security release. Alternatives can be a link to a blog page, news item, or support forum topic which announces the security release.
Please provide a URL where the VEL team can download a new copy of the extension without registration or payment. This does not need to be a public URL. If this is a commercial extension, it can be a temporary link which you can remove once we have downloaded it. A general link to your product landing page is not acceptable.
Failure to provide this will delay marking your extension as resolved