How to disclose Security Vulnerabilities

Open sayoojbkumar opened this issue 1 year ago • 3 comments

What

Resposible Disclosure Program

Does Polyfill-service have any responsible disclosure program? How can I connect with maintainers?

Feb 28 '24 07:02 sayoojbkumar

Details here: https://github.com/polyfillpolyfill/polyfill-service/blob/main/SECURITY.md

Feb 28 '24 08:02 coliff

I'm not sure the polyfill.io domain has any MX records in DNS so I'd be surprised if they received that email.

Feb 28 '24 11:02 alexmuller

It seems like mail adress "[email protected]" doesn't exist, @coliff

Feb 28 '24 14:02 sayoojbkumar

mx record added, you can email to [email protected]

Feb 29 '24 16:02 polyfillcust