This project is provided primarily as a research/academic tool for running HingeProt in Google Colab/Jupyter environments.
Security fixes are applied to the latest main branch. Older tags/commits may not receive security updates.
| Version/Branch | Supported |
|---|---|
main |
✅ |
| Older tags | ❌ |
If you believe you have found a security vulnerability, please do not open a public GitHub issue.
Instead, report it privately using one of the following methods:
-
GitHub Security Advisories (preferred)
Go to the repository’s Security tab → Report a vulnerability. -
Email
Send details to: enesemretas@gmail.com
Please include as much of the following as possible:
- A clear description of the issue and potential impact
- Steps to reproduce (proof-of-concept is helpful)
- Affected files/components (e.g.,
ui.py, Colab upload logic, shell/Perl execution) - Environment details (Colab vs local Jupyter, OS, Python version)
- Any relevant logs or screenshots (avoid sharing secrets)
- Acknowledgement: within 2 days
- Status update: within 7 days after acknowledgement, if more time is needed
If the report is accepted, we will work on a fix and coordinate a responsible disclosure timeline.
If the report is declined (e.g., not a security issue or out of scope), we will explain the reasoning.
Because this project runs external tools (Perl scripts, compiled binaries) and may execute shell commands in notebook environments:
- Treat notebook environments as trusted (especially when running in Colab with your own account).
- Avoid running untrusted code or untrusted PDB files from unknown sources.
- Do not store secrets (API keys/tokens) in notebooks or in the repository.
Thank you for helping keep the project safe.