Where Can I Report Security Vulnerability?

[orangetw]

HI, I found a vulnerability and followed the steps, and sent mail to people on this page.

But seems one of these mail addresses are not exists and there are no reply for 3 days.

Could you check the mail box? Thanks!

[tipsy]

I can't find the email, but I've messaged @perwendel.

[orangetw]

Your mail on contact page seems wrong, gmail replied me “The email account that you tried to reach does not exist.“

David notifications@github.com於 2018年2月25日 週日，下午5:34寫道：

I can't find the email, but I've messaged @perwendel https://github.com/perwendel.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/perwendel/spark/issues/981#issuecomment-368292443, or mute the thread https://github.com/notifications/unsubscribe-auth/ADoRdnxRj7RDzZYoiGXEALtpThYsMbc8ks5tYRsbgaJpZM4SSLJ4 .

--

• Orange -

[tipsy]

That would explain it... Should be mail.davidaase@gmail.com.

[orangetw]

OK, I forwarded to mail.davidaase@gmail.com

David notifications@github.com於 2018年2月25日 週日，下午5:43寫道：

That would explain it... Should be mail.davidaase@gmail.com.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/perwendel/spark/issues/981#issuecomment-368292875, or mute the thread https://github.com/notifications/unsubscribe-auth/ADoRdmowKufvjhKWqJJSlh1UIVh1FKc9ks5tYR01gaJpZM4SSLJ4 .

--

• Orange -

[perwendel]

I've released the mail. I'm on a long weekend vacation and will have a look tomorrow!

[perwendel]

*received

[perwendel]

I've checked the issue. We will create a fix ASAP. Thanks for finding and reporting!

[perwendel]

Fixed! Thanks for reporting and investigating @orangetw