cdklabs / cdklabs/cdk-app-cli

Reporting a vulnerability

Open
#300 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
55
Forks
0
Avg merge
20m
Merged PRs (30d)
4

Description

Hello!

I hope you are doing well!

We are a security research team. Our tool automatically detected a vulnerability in this repository. We want to disclose it responsibly. GitHub has a feature called **Private vulnerability reporting**, which enables security research to privately disclose a vulnerability. Unfortunately, it is not enabled for this repository.

Can you enable it, so that we can report it?

Thanks in advance!

PS: you can read about how to enable private vulnerability reporting here: https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository

Contributor guide

Open the contributing guide

Research direction

Read GitHub's private vulnerability reporting documentation linked in the issue, then check the repository's security settings. Done means private vulnerability reporting is enabled for cdklabs/cdk-app-cli so security researchers can submit a private report.

Written by the indexing model from the issue text.

Assessment

Tech stack
github
Domain
security
Issue type
Feature
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.