Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trying to get in touch regarding a security issue #895

Open
JamieSlome opened this issue Jul 10, 2021 · 4 comments
Open

Trying to get in touch regarding a security issue #895

JamieSlome opened this issue Jul 10, 2021 · 4 comments

Comments

@JamieSlome
Copy link

Hi there,

I couldn't find a SECURITY.md in your repository and am not sure how to best contact you privately to disclose a security issue.

Can you add a SECURITY.md file with an e-mail to your repository, so that our system can send you the vulnerability details? GitHub suggests that a security policy is the best way to make sure security issues are responsibly disclosed.

Once you've done that, you should receive an e-mail within the next hour with more info.

Thanks! (cc @huntr-helper)

@panique
Copy link
Owner

panique commented Jul 12, 2021

Hi Jamie, thanks a lot, but this project has reached End of Life for around 6 years, not sure how to deal with this issue. You can reach me by using my github name @web.de ! See you Jamie

@losttheplot
Copy link

Hi Jamie, I have built a massive project starting with Huge at its core and working outwards. I'm fairly confident that what I have ended up with is secure, but never say never and just the hint of a problem has me worried. Personally, if there is no way to publicise the issue in private, I would rather you just go ahead and post it on here ...but that's just my opinion.

@JamieSlome
Copy link
Author

#896 - please refer to.

@JamieSlome
Copy link
Author

@panique - alternatively, you can view the advisory here. It is only accessible to you and the researcher.

https://huntr.dev/bounties/1625876449495-panique/huge/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants