huggingface / huggingface/datasets
Please enable Private Vulnerability Reporting
Open
- Dominant language
- Python
- Stars
- 22k
- Forks
- 3.4k
- Avg merge
- 5d 7h
- Merged PRs (30d)
- 17
Description
Hi datasets team,
I have a security finding in datasets that I would like to disclose privately. GitHub Private Vulnerability Reporting is currently disabled on this repo.
Could you turn it on? It's at Settings > Security > Code security and analysis > Private vulnerability reporting. Once enabled I will file the full report through that channel so a GHSA + CVE can be assigned cleanly.
If you'd prefer email instead, the address listed in your SECURITY.md (if any) works too — let me know and I'll send the writeup that way.
Thanks,
0xBassia (https://github.com/0xBassia)
Contributor guide
Assessment
This issue has not been assessed yet.