Reporting a vulnerability
- Dominant language
- TypeScript
- Stars
- 55
- Forks
- 0
- Avg merge
- 20m
- Merged PRs (30d)
- 4
Description
Hello!
I hope you are doing well!
We are a security research team. Our tool automatically detected a vulnerability in this repository. We want to disclose it responsibly. GitHub has a feature called **Private vulnerability reporting**, which enables security research to privately disclose a vulnerability. Unfortunately, it is not enabled for this repository.
Can you enable it, so that we can report it?
Thanks in advance!
PS: you can read about how to enable private vulnerability reporting here: https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository
Contributor guide
Research direction
Read GitHub's private vulnerability reporting documentation linked in the issue, then check the repository's security settings. Done means private vulnerability reporting is enabled for cdklabs/cdk-app-cli so security researchers can submit a private report.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github
- Domain
- security
- Issue type
- Feature
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100