starred/BoostNote-App

Fork 0

mirror of https://github.com/BoostIO/BoostNote-App.git synced 2026-04-27 05:15:56 +03:00

[GH-ISSUE #1547] Security concern #509

New issue

Closed

opened 2026-03-03 00:21:41 +03:00 by kerem · 4 comments

kerem commented

2026-03-03 00:21:41 +03:00

Owner

Originally created by @JamieSlome on GitHub (Mar 31, 2022).
Original GitHub issue: https://github.com/BoostIO/BoostNote-App/issues/1547

Hey there!

I belong to an open source security research community, and a member (@effectrenan) has found an issue, but doesn’t know the best way to disclose it.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

Originally created by @JamieSlome on GitHub (Mar 31, 2022). Original GitHub issue: https://github.com/BoostIO/BoostNote-App/issues/1547 Hey there! I belong to an open source security research community, and a member (@effectrenan) has found an issue, but doesn’t know the best way to disclose it. If not a hassle, might you kindly add a `SECURITY.md` file with an email, or another contact method? GitHub [recommends](https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository) this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future. Thank you for your consideration, and I look forward to hearing from you! (cc @huntr-helper)

kerem closed this issue

2026-03-03 00:21:41 +03:00

kerem commented

2026-03-03 00:21:42 +03:00

Author

Owner

@Rokt33r commented on GitHub (May 12, 2022):

Sorry for my late response. We will add it soon. For now, please send it to rokt33r@boostio.co or info@boostnote.io.

@Rokt33r commented on GitHub (May 12, 2022): Sorry for my late response. We will add it soon. For now, please send it to rokt33r@boostio.co or info@boostnote.io.

kerem commented

2026-03-03 00:21:42 +03:00

Author

Owner

@JamieSlome commented on GitHub (May 12, 2022):

@Rokt33r - not at all! 👍

We did send some e-mails to the info@ e-mail address but did not receive a response. If it makes it easier, you can find both reports here:

https://huntr.dev/bounties/d8c76c3c-a81b-4f3c-b93f-b6a623089c6a/
https://huntr.dev/bounties/d349aa46-1a60-4ee0-94c1-394e50c72f5d/

They are both private and only accessible to maintainers with repository write permissions 😄

@JamieSlome commented on GitHub (May 12, 2022): @Rokt33r - not at all! 👍 We did send some e-mails to the `info@` e-mail address but did not receive a response. If it makes it easier, you can find both reports here: https://huntr.dev/bounties/d8c76c3c-a81b-4f3c-b93f-b6a623089c6a/ https://huntr.dev/bounties/d349aa46-1a60-4ee0-94c1-394e50c72f5d/ They are both private and only accessible to maintainers with repository write permissions 😄

kerem commented

2026-03-03 00:21:42 +03:00

Author

Owner

@Rokt33r commented on GitHub (May 13, 2022):

Confirmed! Thanks for the links. We will fix the issues soon.

@Rokt33r commented on GitHub (May 13, 2022): Confirmed! Thanks for the links. We will fix the issues soon.

kerem commented

2026-03-03 00:21:42 +03:00

Author

Owner

@JamieSlome commented on GitHub (May 13, 2022):

@Rokt33r - you are welcome! 👍 If you require any support with the fix, feel free to drop a message on the reports, and I am sure the researcher will be able to help.

@JamieSlome commented on GitHub (May 13, 2022): @Rokt33r - you are welcome! 👍 If you require any support with the fix, feel free to drop a message on the reports, and I am sure the researcher will be able to help.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/BoostNote-App#509

No description provided.

Rows
Columns