I attempted to report a security vulnerability using the email address listed in your security policy: security@libgit2.com.
The message was rejected and bounced with the following error:
Your message to libgit2-security@googlegroups.com has been blocked. See technical details below for more information.
To rule out sender-related issues, I tried from two different email accounts:
- My business domain
- A Gmail account
Both messages were rejected with the same result.
As a result, I currently have no way to privately disclose the vulnerability. Could someone from the security team please verify that the security reporting address is working or provide an alternative contact method for responsible disclosure?
Is security@libgit2.com forwarding emails to libgit2-security@googlegroups.com? If so, it appears the messages may be getting blocked somewhere along that path. Should I directly send to libgit2-security@googlegroups.com?
Visitar URL original
I attempted to report a security vulnerability using the email address listed in your security policy: security@libgit2.com.
The message was rejected and bounced with the following error:
To rule out sender-related issues, I tried from two different email accounts:
Both messages were rejected with the same result.
As a result, I currently have no way to privately disclose the vulnerability. Could someone from the security team please verify that the security reporting address is working or provide an alternative contact method for responsible disclosure?
Is
security@libgit2.comforwarding emails tolibgit2-security@googlegroups.com? If so, it appears the messages may be getting blocked somewhere along that path. Should I directly send tolibgit2-security@googlegroups.com?