OpenWALDO welcomes responsible reports that help protect visitors and the community.
Please use GitHub private vulnerability reporting for vulnerabilities in this website. If that channel is unavailable, email gmkurtzer@gmail.com or gmk@ciq.com.
Please include:
- the affected page, file, or commit;
- the security impact and conditions required to reproduce it;
- clear reproduction steps or a minimal proof of concept; and
- any suggested remediation, if available.
Please do not include exploit details in a public issue before the project has had an opportunity to investigate and address the report. Avoid accessing, changing, or retaining data that does not belong to you.
The deployed website at https://openwaldo.org/ and the current main branch
are supported. Reports about other OpenWALDO components should be submitted to
the private vulnerability reporting channel for the affected repository when
one is available.