Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Responsible disclosure policy #17331

Open
JamieSlome opened this issue Jul 6, 2022 · 2 comments
Open

Responsible disclosure policy #17331

JamieSlome opened this issue Jul 6, 2022 · 2 comments
Labels
Security Related to software vulnerability in qbt (don't overuse this)

Comments

@JamieSlome
Copy link

Hello 👋

I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@omriman067) has found a potential issue, which I would be eager to share with you.

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Looking forward to hearing from you 👍

(cc @huntr-helper)

@xavier2k6
Copy link
Member

You can email the maintainer via sledgehammer999 at qbittorrent dot org

CC @sledgehammer999

@xavier2k6 xavier2k6 added the Security Related to software vulnerability in qbt (don't overuse this) label Jul 6, 2022
@JamieSlome
Copy link
Author

@xavier2k6 - thanks for the response 👍

I will get an e-mail sent over to @sledgehammer999 :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Security Related to software vulnerability in qbt (don't overuse this)
Projects
None yet
Development

No branches or pull requests

2 participants