How to report security vulnerabilities
btoews opened this issue · comments
Ben Toews commented
The documentation for this project doesn't specify how security vulnerabilities should be reported. I sent an email on September 9th to the address listed in the gemspec and haven't received a response. Would opening an issue/PR be better? Thanks.
Nov Matake commented
email is OK, but I couldn't notice your mail in September and can't find it
Ben Toews commented
I sent it again. It’s from a latacora.com email address.
…On Tue, Oct 4, 2022 at 5:03 PM Nov Matake ***@***.***> wrote:
email is OK, but I couldn't notice your mail in September and can't find it
—
Reply to this email directly, view it on GitHub
<#108 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAIXLBPKS7HE23VZT5VNBYTWBSZUZANCNFSM6AAAAAAQ4WLXKU>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>