Repository files navigation

⚠️ Please do not file public GitHub issues for securityvulnerabilities as they are open for everyone to see!⚠️

We encourage responsible disclosure practices for securityvulnerabilities.

If you believe you've found a security-related bug, fill out a newvulnerability report via GitHub directly. To do so, follow these instructions:

1. Click on theSecurity tab in the project repository.
2. Click the greenReport a vulnerability button at the top right corner.
3. Fill in the form as accurately as you can, including as many details aspossible.
4. Click the greenSubmit report button at the bottom.

Alternatively, drop an email to ourCherryPy security mailbox instead offiling a ticket or posting toany public groups. It is currently set up toforward every incoming letter to bothJason R. Coombs andSviatoslavSydorenko. You can choose to email us directly. We will try to assessthe problem in timely manner and disclose it in a responsible way.

If you prefer to, you may also report a security vulnerability through theTidelift security contact.Tidelift will coordinate the fix and disclosure.This is not the maintainers' first preference, though. Please, use the GitHub'svulnerability reporting option, whenever possible.