Weblate の問題の報告

私たちの 課題管理ツール は GitHub で管理中:

Weblate の問題を報告や、改善を提案することを歓迎します。発見したものが Weblate のセキュリティ上の問題である場合は、下記の「セキュリティの問題」のセクションを参照してください。

セキュリティの問題

In order to give the community time to respond and upgrade you are strongly urged to report all security issues privately. HackerOne is used to handle security issues, and can be reported directly at HackerOne.

Alternatively, report to security@weblate.org, which ends up on HackerOne as well.

If you don't want to use HackerOne, for whatever reason, you can send the report by e-mail to michal@cihar.com. You can choose to encrypt it using this PGP key 3CB 1DF1 EF12 CF2A C0EE 5A32 9C27 B313 42B7 511D. You can also get the PGP key from Keybase.

注釈

Weblate depends on third party components for many things. In case you find a vulnerability affecting one of those components in general, please report it directly to the respective project.

Some of these are:

• Django

• Django REST framework

• Python Social Auth