Skip to content

Update email to report the security vulnerabilities #803

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jun 13, 2025
Merged

Update email to report the security vulnerabilities #803

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0c299b0
Update email to report the security vulnerabilities
krassowski Jun 12, 2025
e53aaa6
Apply suggestions from code review
choldgraf Jun 13, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions security.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,11 +11,11 @@ of security issues.

## How to report vulnerabilities

If you believe you've found a security vulnerability in a [Jupyter Subproject](https://jupyter.org/governance/list_of_subprojects.html),
you can either:
To report a security vulnerability in a [Jupyter Subproject](https://jupyter.org/governance/list_of_subprojects.html),
take one of these two actions:

- directly open a GitHub Security Advisory (GHSA) in the relevant repository
- report it to [security@ipython.org](mailto:security@ipython.org) if opening a GHSA is not possible, or you are unsure
1. **Open a GitHub Security Advisory** (GHSA) in the relevant repository (preferred approach). See [the GitHub instructions for opening security advisories](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability).
2. **Send an e-mail to [security@jupyter.org](mailto:security@jupyter.org)** reporting the vulnerability. Only do this if opening a GHSA is not possible, or you are unsure what to do.
where it will belong.

**We do not currently run bug bounty programs, and do not currently reward
Expand Down
Loading