lunasvg icon indicating copy to clipboard operation
lunasvg copied to clipboard

How to get in touch regarding a security concern

Open JamieSlome opened this issue 2 years ago • 2 comments

Hey there!

I belong to an open source security research community, and a member (@hdthky) has found an issue, but doesn’t know the best way to disclose it.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

JamieSlome avatar Mar 28 '22 19:03 JamieSlome

has found an issue, but doesn’t know the best way to disclose it.

You can use the github issue if it doesn't contain any sensitive or private data, or you can just email me directly.

might you kindly add a SECURITY.md file with an email, or another contact method?

I will make out time for it.

Thank You

sammycage avatar Mar 28 '22 21:03 sammycage

@sammycage - thanks for your response 👍

It might be easier for you to view the reports directly here: https://huntr.dev/bounties/d623540e-b251-4489-af28-0de189f66d7b/ https://huntr.dev/bounties/48ee7be7-bff5-4c13-aae1-ae36351e75e4/ https://huntr.dev/bounties/28e87590-a097-4e65-a561-5a6c5bdfdb58/ https://huntr.dev/bounties/76de2ad5-a707-481d-bf56-3c4734bf3698/

They are all private and only accessible to you. Let me know if you have any questions.

JamieSlome avatar Mar 29 '22 09:03 JamieSlome