picocms / Pico

Pico is a stupidly simple, blazing fast, flat file CMS.
http://picocms.org/
MIT License
3.81k stars 616 forks source link

Trying to get in touch with you regarding a security issue #590

Closed huntr-helper closed 3 years ago

huntr-helper commented 3 years ago

Hi there,

I couldn't find a SECURITY.md in your repository and so am not sure how to best contact you privately to disclose the security issue.

Can you add a SECURITY.md file with your e-mail to your repository, so that I know who to contact? GitHub suggests that a security policy is the best way to make sure security issues are responsibly disclosed.

Once you've done that, please let me know so I can ping you the info.

Thanks! (cc @JamieSlome)

PhrozenByte commented 3 years ago

Done https://github.com/picocms/Pico/commit/d0f32c0a2b0ac841b0956d599ab7303c81e5fbc4

You can reach me via picocms.org@daniel-rudolf.de

PhrozenByte commented 3 years ago

Request resolved by creating a SECURITY.md, see d0f32c0

Report moved to #591