Responsible disclosure policy

[JamieSlome]

Hello 👋

I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@ihsinme) has found a potential issue, which I would be eager to share with you.

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Looking forward to hearing from you 👍

(cc @huntr-helper)

[jubalh]

In the meantime I would suggest to just write Nick an e-mail to the places where he already mentioned his adress.
Namely the project website: http://unixodbc.net/ (See Contact Information)

Or checking which e-mail he uses on this repo using git log.

[lurcher]

On 01/06/2022 13:20, Jamie Slome wrote: Hello 👋 I run a security community that finds and fixes vulnerabilities in OSS. A researcher ***@***.*** <https://github.com/ihsinme>) has found a potential issue, which I would be eager to share with you. Could you add a |SECURITY.md| file with an e-mail address for me to send further details to? GitHub recommends <https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository> a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future. Looking forward to hearing from you 👍 (cc @huntr-helper <https://github.com/huntr-helper>) — Reply to this email directly, view it on GitHub <#109>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABYK62PBSSYNWOQIN6OXIP3VM5IRXANCNFSM5XRANZZA>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

I have added a |SECURITY.md, hope that helps. |