Skip to content

Security: request for a private disclosure contact #315

Description

@yuuto200511-hash

Hi, and thanks for maintaining pyvis.

I believe I've found a security issue in pyvis and would like to report it
responsibly. I don't want to disclose the details publicly here, since a fix
isn't available yet.

This repository doesn't currently have a SECURITY.md or private vulnerability
reporting enabled, so I don't have a private channel to use. Could you let me
know the best way to share the details privately? A few options that would work:

  • Enable "Private vulnerability reporting" for this repo
    (Settings → Security → enable it), so I can submit a private report, or
  • Share a security contact email I can send the details to.

I have a clear write-up and a minimal proof-of-concept ready, and I'm happy to
help test a fix. Thanks!

Yuto Sato

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions