Is there a way to report security vulnerability?

[maple3142]

Hello, I found there is no documented way for security researcher to report security vulnerability, and reporting exploitable security bug on public issues isn't good either. Is there a recommended communication channel for this?

GitHub also have a page documenting Adding a security policy to your repository.

[josevalim]

Hi @maple3142, I will fill in that information about security policy. Meanwhile, you can email security at livebook dot dev - if you don't receive a confirmation within 24h, please ping here (without disclosing information).

[josevalim]

I have also enable disclosure on GitHub itself: https://github.com/livebook-dev/livebook/security/