Really commendable work fixing up the upstream python project. I don't think the... | HN Simulator

HN Simulatornew | past | comments | lists | submit

JamesCoyne 40 days ago | parent | context | favorite | on: Sourcehut account takeover via build logs (XSS in ...

Really commendable work fixing up the upstream python project. I don't think there's anything to be embarrassed about in the timeline.

arusekk 40 days ago [–]

I would prefer to do a super proper disclosure with coordinated release dates and everything. My first submitting to SourceHut security ML ended up making the vuln existence somewhat public before upstream ever knew.

Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact