bbc / simorgh

The BBC's Open Source Web Application. Contributions welcome! Used on some of our biggest websites, e.g.

Home Page:https://www.bbc.com/thai

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Reporting a vulnerability

igibek opened this issue · comments

Hello!

I hope you are doing well!

We are a security research team. Our tool automatically detected a vulnerability in this repository. We want to disclose it responsibly. GitHub has a feature called Private vulnerability reporting, which enables security research to privately disclose a vulnerability. Unfortunately, it is not enabled for this repository.

Can you enable it, so that we can report it?

Thanks in advance!

PS: you can read about how to enable private vulnerability reporting here: https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository

👋 @igibek Thank you for reporting this, we have now enabled Private vulnerability reporting for this repository, so feel free to share your findings with us!