Repository navigation
Trying to get in touch regarding a security issue #158
Description
Activity
@JamieSlome how could we get in touch. I'm interested to know the issue for our projects.
@holblin - I will respond to your e-mail 👍
Reacted by holblin@holblin is the issue fixed in your fork?
I tried to contact them to have details. Except for asking meeting, I didn't receive any details of a security issue.
It might be fixed due to the changes I have done on regex and I think it might be something related to that. I don't see how this could be used or leveraged for attacks except maybe DOS but a lot of the consumers of the package (if not all) would not be impacted.
Hey there!
I'd like to report a security issue but cannot find contact instructions on your repository.
If not a hassle, might you kindly add a
SECURITY.mdfile with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.Thank you for your consideration, and I look forward to hearing from you!
(cc @huntr-helper)