Skip to content

Security contact needed for responsible disclosure #280

Description

@Akshat-Parikh-pt

Hi maintainers, I have a security vulnerability report for this package that I'd like to share privately before any public disclosure. This repo doesn't have a SECURITY.md or private vulnerability reporting enabled, so I don't have a private channel to reach you. Could someone provide a contact, or enable private vulnerability reporting so I can submit through GitHub's own flow? I've already reported this through Samsung's PSIRT channel but wanted to make sure the actual maintainers of this repo are aware directly. No vulnerability details are in this issue on purpose. Thanks.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions