vrchat-community / creator-companion

The Entry Point for Making Things in VRChat
https://vrchat.com/home/download
60 stars 425 forks source link

Where is the best place to report vulnerabilities? #426

Open anatawa12 opened 7 months ago

anatawa12 commented 7 months ago

Where is the best place to report vulnerabilities? I assume https://help.vrchat.com/hc/en-us/requests/new is the place but it's not clear in this repository. I think it's better to add SECURITY.md.

anatawa12 commented 7 months ago

Sorry, I fixed the wording. I mean security exploits, in other words, security vulnerabilities.

anatawa12 commented 7 months ago

I have post a vulnerabilities to https://help.vrchat.com/hc/en-us/requests/new but there are no response for two weeks and there are no way to check status of the ticket. (current help.vrchat.com does not have any way to check status of ticket on web.)