Reporting a vulnerability

[igibek]

Hello!

I hope you are doing well!

We are a security research team. Our tool automatically detected a vulnerability in this repository. We want to disclose it responsibly. GitHub has a feature called Private vulnerability reporting, which enables security research to privately disclose a vulnerability. Unfortunately, it is not enabled for this repository.

Can you enable it, so that we can report it?

Thanks in advance!

PS: you can read about how to enable private vulnerability reporting here: https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository

[Harital]

I also want to privately report a vulnerability. Unfortunately, I did not find where.

[jnelle]

Silence is the new answer, thx @appleboy and all the other maintainers

[thinkerou]

v1.9.1 have released, please see https://github.com/gin-gonic/gin/releases/tag/v1.9.1, thanks!

[motoyasu-saburi]

@thinkerou Probably a separate issue from the CVE-2023-29401 issue. Could you reopen this issue?

[thinkerou]

I and @appleboy have not the permission, need @javierprovecho thanks!

[Harital]

I'm afraid CWE-78 is also present in v1,9.1. Do you want to open a separate issue or attach it to this one?