We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions. To report a vulnerability, send an e-mail to both:
- opensource.contact@orange.com
- and cert.cc@orange.com
- and all people in MAINTAINERS including the word "SECURITY" in the subject line
Please allow our team sufficient time to resolve the vulnerability before disclosing it ; we'll remain in contact about the fix and may ask for your assistance to verify it is resolved.
We will endeavor to respond quickly, and will keep you updated throughout the process.