Where is a good place to report/discuss possible security issues?

Having trouble with the game? Report issues and get help here. Read this first!

Moderators: Forum Moderators, Developers

Forum rules
Before reporting issues in this section, you must read the following topic:
Post Reply
gnombat
Posts: 266
Joined: June 10th, 2010, 8:49 pm
Contact:

Where is a good place to report/discuss possible security issues?

Post by gnombat »

Is there a place where security issues can be reported privately, to avoid publicly disclosing possible vulnerabilities?

Obviously the forum is public, and I think the GitHub bug tracker is entirely public too, so reporting unfixed vulnerabilities in either place would not be responsible disclosure.

For example, is there an email address where security-related reports should be sent?

User avatar
Iris
Site Administrator
Posts: 6626
Joined: November 14th, 2006, 5:54 pm
Location: Chile
Contact:

Re: Where is a good place to report/discuss possible security issues?

Post by Iris »

We don't have a specific medium for this kind of issue at the moment, but you are welcome to message the project manager (currently Vultraz) about it if it affects the game, or a Wesnoth.org staff member if it affects the website.
Author of the unofficial UtBS sequels Invasion from the Unknown and After the Storm.

Post Reply