Hello,
I found a security issue in this project (command injection via a Gradio input field) and tried to report it privately to the GitHub-noreply address on your profile, but the email bounced (invalid recipient format for that address).
This repo doesn't have SECURITY.md or private vulnerability reporting enabled (Settings > Security > "Private vulnerability reporting"). Could you either enable that, or share an email/contact I can use to send the report? I'd rather not post exploit details in a public issue.
Thanks,
Raphael Zanarelli (@zanarellidev)
Hello,
I found a security issue in this project (command injection via a Gradio input field) and tried to report it privately to the GitHub-noreply address on your profile, but the email bounced (invalid recipient format for that address).
This repo doesn't have SECURITY.md or private vulnerability reporting enabled (Settings > Security > "Private vulnerability reporting"). Could you either enable that, or share an email/contact I can use to send the report? I'd rather not post exploit details in a public issue.
Thanks,
Raphael Zanarelli (@zanarellidev)