Who to contact for security issues
See original GitHub issueHey there!
I belong to an open source security research community, and a member (@r0hansh) has found an issue, but doesn’t know the best way to disclose it.
If not a hassle, might you kindly add a SECURITY.md
file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.
Thank you for your consideration, and I look forward to hearing from you!
(cc @huntr-helper)
Issue Analytics
- State:
- Created 2 years ago
- Reactions:1
- Comments:9 (4 by maintainers)
Top Results From Across the Web
Report a security or privacy vulnerability - Apple Support
Alternatively, you can send your research to us via email at product-security@apple.com. Please make sure that you include the information ...
Read more >Report an Incident - CISA
If you believe someone is using your Social Security number, contact the Social Security Administration (SSA) fraud hotline at 1-800-269-0271.
Read more >Online Safety | USAGov
If you believe you're a victim of internet fraud or cybercrime, report it to the Internet Crime Complaint Center (IC3). Or, you can...
Read more >Cyber Crime — FBI
Respond and Report · File a Report with the Internet Crime Complaint Center · Contact Your Local FBI Field Office.
Read more >Security Issues report - Search Console Help - Google Support
Security Issues report. If a Google evaluation determines that your site was hacked, or that it exhibits behavior that could potentially harm a...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Both this issue and this issue are fixed now. And the
SECURITY.md
file has been added, so I’m closing this as resolved.We are working on this, pull request: https://github.com/karma-runner/karma/pull/3746.
If you have any urgent security issue, please contact karma-runner-eng+security@google.com.