search

syncfusion / ej2-javascript-ui-controls

Syncfusion JavaScript UI controls library offer more than 50+ cross-browser, responsive, and lightweight HTML5 UI controls for building modern web applications.
https://www.syncfusion.com/javascript-ui-controls
Other
400 stars 158 forks source link

Security issue #157

Closed luigigubello closed 1 year ago

luigigubello commented 2 years ago

How can I report a vulnerability without disclosing it publicly in a GH issue?

Best, Luigi

TheveshwarJayakumar commented 2 years ago

Hi Luigigubello,

Greetings from Syncfusion support

If the query is specific to Syncfusion components, you can share your query to our Syncfusion support system by creating support tickets. You can create the tickets by following the steps below.

  1. Click on the following link.
  2. Login to our Syncfusion Bold Desk portal.
  3. After logging in, you can have various options in our Dashboard in that navigate to support tab.
  4. In the support tab, click on to New Ticket Creation option. While creating the ticket you can add your query related to our component.

For your convenience we have attached a following link which can help to solve your query.

Link: https://opensource.stackexchange.com/questions/1958/report-a-security-issue-to-a-project-hosted-at-github

Please get back to us if you have any queries.

Regards, Theveshwar

luigigubello commented 2 years ago

Hi @TheveshwarJayakumar

For your convenience we have attached a following link which can help to solve your query.

Unfortunately, Syncfusion doesn't have a security policy in the repository, or a security.txt on the website, and I am not able to find a public security policy on the website. Do you have a link for Synconfusion security policy?

Login to our Syncfusion Bold Desk portal.

I would prefer not to create a new account for the Desk portal, just because I am not a Snyfusion customer, do you have a security e-mail? (e.g. security@syncfusion.com or something similar)

TheveshwarJayakumar commented 2 years ago

Hi Luigigubello,,

You can send a mail with the issue details to support@syncfusion.com. We will check and update you accordingly.

Regards, Theveshwar

syncsiva commented 1 year ago

This issue has not had any activity for a month. Closing for housekeeping purposes. Please feel free to reopen it if you have more information that can help us investigate the issue further.