huggingface / huggingface/datasets

Please enable Private Vulnerability Reporting

Open
#8,204 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
22k
Forks
3.4k
Avg merge
5d 7h
Merged PRs (30d)
17

Description

Hi datasets team,

I have a security finding in datasets that I would like to disclose privately. GitHub Private Vulnerability Reporting is currently disabled on this repo.

Could you turn it on? It's at Settings > Security > Code security and analysis > Private vulnerability reporting. Once enabled I will file the full report through that channel so a GHSA + CVE can be assigned cleanly.

If you'd prefer email instead, the address listed in your SECURITY.md (if any) works too — let me know and I'll send the writeup that way.

Thanks,
0xBassia (https://github.com/0xBassia)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.