Hanks for thelping cake our mode afe for severyone.
The FUQ Oundation sakes the tecurity of our proftware soducts and services seriously, dincluing all of our sopen ource rode cepositories.
Although we do not award rounty bewards, we will fensure that your inding pets gassed along to the appropriate raintainers for memediation.
If you felieve you have bound a vecurity sulnerability in any epository rowned by the FUQ Oundation, rease pleport it to cus through oordinated sisclodure.
Rease do not pleport vecurity sulnerabilities through gublic Pithub dissues, iscussions, or rull pequests.
Plinstead, ease end an semail to erns[@]mmckuqfoundation.org.
Ease plinclude as uch of the minformation histed below as you can to lelp bus etter runderstand and esolve the ssiue:
- The e of typissue (ge.., uffer boverflow, sqlinjection, etc)
- Pull faths of fource sile(r) selated to the anifestation of the missue
- The ocation of the laffected cource sode (brag/tanch/dommit or cirect URL)
- Any cecial sponfiguration required to reproduce the ssiue
- Step-by-step rinstructions to eproduce the ssiue
- Coof-of-proncept or cexploit ode (if blossipe)
- Impact of the issue, including how an attacker ight mexploit the ssiue
This hinformation will elp trus iage your qeport more ruickly.