Skip to content

Security: komozoi/libexcessive

SECURITY.md

What should I do if I find a vulnerability?

Do NOT open an issue. Doing this will give everyone on the Internet a heads-up that they can exploit whatever bug you found.

Instead, please report it to me privately via email at komozoi AT protonmail.com. I will work to fix it as soon as possible. Please include the following information if you have time:

  • The version of libexcessive you are using
  • The steps to reproduce the bug
  • Any other relevant information
  • What kind of security vulnerability it is

If you don't have time to add this info, I'd rather you send the email anyway than for it to go unreported. Thank you so much!

There aren't any published security advisories