-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Security Contact #2267
Comments
Hi, sorry for the wait. I replied via email.
…On Tue, Jan 24, 2023 at 6:43 AM Synopsys CyRC Responsible Disclosure < ***@***.***> wrote:
Hello,
Synopsys' Cybersecurity Research Center (CyRC) has identified
vulnerabilities within the code base that we would like to responsibly
disclose.
@manolama <https://github.com/manolama> I've attempted to engage you
directly through email, but haven't received any response. Could you please
recommend an individual who can receive the details?
—
Reply to this email directly, view it on GitHub
<#2267>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAKQLJEWKKQRCNYXWRF4WNDWT7S77ANCNFSM6AAAAAAUFFRMWU>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
--
Sincerely,
Chris Larsen
|
@manolama do you have any updates on this matter? |
manolama
added a commit
to manolama/opentsdb
that referenced
this issue
Apr 11, 2023
Escaping the user supplied input when outputing the HTML for the old BadRequest HTML handlers should help. Thanks to the reporters. Fixes CVE-2018-13003.
manolama
added a commit
to manolama/opentsdb
that referenced
this issue
Apr 11, 2023
Escaping the user supplied input when outputing the HTML for the old BadRequest HTML handlers should help. Thanks to the reporters. Fixes CVE-2018-13003.
manolama
added a commit
to manolama/opentsdb
that referenced
this issue
Apr 11, 2023
Escaping the user supplied input when outputing the HTML for the old BadRequest HTML handlers should help. Thanks to the reporters. Fixes CVE-2018-13003.
manolama
added a commit
to manolama/opentsdb
that referenced
this issue
Apr 11, 2023
Escaping the user supplied input when outputing the HTML for the old BadRequest HTML handlers should help. Thanks to the reporters. Fixes CVE-2018-13003.
manolama
added a commit
that referenced
this issue
Apr 11, 2023
Escaping the user supplied input when outputing the HTML for the old BadRequest HTML handlers should help. Thanks to the reporters. Fixes CVE-2018-13003.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hello,
Synopsys' Cybersecurity Research Center (CyRC) has identified vulnerabilities within the code base that we would like to responsibly disclose.
@manolama I've attempted to engage you directly through email, but haven't received any response. Could you please recommend an individual who can receive the details?
The text was updated successfully, but these errors were encountered: