search

sqlalchemy / alembic

A database migrations tool for SQLAlchemy.
MIT License
2.74k stars 240 forks source link

Enable Private Vulnerability Reporting #1536

Closed rokydas-OR closed 1 week ago

rokydas-OR commented 1 week ago

Summary

In your repository, we have found a bug that may require your attention. We do not want to disclose the details. Therefore, we request you to enable private vulnerability reporting in your repository.

Sponsorship and Support

This work is done by the security researchers from OpenRefactory and is supported by the Open Source Security Foundation (OpenSSF): Project Alpha-Omega. Alpha-Omega is a project partnering with open source software project maintainers to systematically find new, as-yet-undiscovered vulnerabilities in open source code - and get them fixed – to improve global software supply chain security.

The bug is found by running the Intelligent Code Repair (iCR) tool by OpenRefactory and then manually triaging the results.

CaselIT commented 1 week ago

Hi,

Why have you opened 3 issue with the same content? Closing as spam.

Please avoid automated tools

CaselIT commented 1 week ago

Alpha-Omega is a project partnering with open source software project maintainers to systematically find new, as-yet-undiscovered vulnerabilities in open source code

Note that the current approach to spam issues is the opposite of partnering with open source maintainers