Github Security Lab Vulnerability Report

[Kwstubbs]

Greetings Cognita maintainers,

Github has found a potentail vulnerability in Cognita. Please let us know of a point of contact so that we can discuss this privately. We have the Private Vulnerability Reporting feature if you do not have an established point of contact.

Thanks, Kevin

[agutgutia1991]

Hi Kevin! Please share on email to @.*** , @.*** , @.*** and @.***

On Thu, 15 Aug, 2024, 13:05 Kevin Stubbings, @.***> wrote:

Greetings Cognita maintainers,

Github has found a potentail vulnerability in Cognita. Please let us know of a point of contact so that we can discuss this privately. We have the Private Vulnerability Reporting https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository feature if you do not have an established point of contact.

Thanks, Kevin

— Reply to this email directly, view it on GitHub https://github.com/truefoundry/cognita/issues/304, or unsubscribe https://github.com/notifications/unsubscribe-auth/ADKJQF5SZW7TPM2Y7VO6ZCLZRRK33AVCNFSM6AAAAABMRXL3ASVHI2DSMVQWIX3LMV43ASLTON2WKOZSGQ3DONJXGE2TCNY . You are receiving this because you are subscribed to this thread.Message ID: @.***>

[Kwstubbs]

@agutgutia1991 It seems the emails have been censored.

[chiragjn]

Hey @Kwstubbs, I have enabled Private Vulnerability Reporting for this repository. You can also reach out to us on [email protected]

[chiragjn]

I am closing this as we have not heard back. Please feel free to submit via Private Vulnerability Reporting, we'll be happy to address any issues

[Kwstubbs]

@chiragjn I have submitted a report in Private Vulnerability Reporting. Can you let me know if you have seen it?

[chiragjn]

I have accepted it now, sorry for the delay and again thank you so much for submitting, we'll get them fixed