Responsible Disclosure - Reminder

[aleister1102]

Hi,

I have sent an email to opensource-security@github.com for reporting a vulnerability, but have not received any response yet.

I also submitted a GitHub advisory as requested by the maintainers, but got no response for 3 weeks.

Can you have a look?

Thanks!

[github-actions]

Thank you for your responsible disclosure efforts! 🙏

This issue couldn't be automatically classified into the standard categories (bug, enhancement, question, or documentation) because it relates to a security vulnerability disclosure process — which requires human review.

A maintainer will follow up on your report. In the meantime, you may also want to:

• Check the SECURITY.md file in this repository for guidance on the disclosure process
• Follow up directly via the GitHub Security Advisory you submitted

A human reviewer will look into this shortly.

Generated by Issue Classification Agent for issue #1255 · ● 95.5K · ◷

[stephentoub]

reporting a vulnerability

Related to copilot-sdk?

[aleister1102]

reporting a vulnerability

Related to copilot-sdk?

Yes, it is related to copilot-sdk. You can check it here: https://github.com/github/copilot-sdk/security/advisories/GHSA-8cpr-cw8h-jw58.

[stephentoub]

thanks, we'll take a look

[patniko]

Closing since main security advisory was addressed.