AstroPrint / AstroBox

AstroBox allows you to control your 3D Printer wirelessly
https://www.astroprint.com/products/p/astrobox-software
GNU Affero General Public License v3.0
157 stars 47 forks source link

Enable Private Vulnerability Reporting in GitHub #603

Open ZuhairORZaki opened 6 months ago

ZuhairORZaki commented 6 months ago

In your repository, we have found a bug that may require your attention. We do not want to disclose the details. Therefore, we request you to enable private vulnerability reporting in your repository.

Sponsorship and Support:

This work is done by the security researchers from OpenRefactory and is supported by the Open Source Security Foundation (OpenSSF): Project Alpha-Omega. Alpha-Omega is a project partnering with open source software project maintainers to systematically find new, as-yet-undiscovered vulnerabilities in open source code - and get them fixed - to improve global software supply chain security.

The bug is found by running the iCR tool by OpenRefactory, Inc. and then manually triaging the results.