请求: 启用私有漏洞报告 / 提供安全联系人
Hi maintainers, We're security researchers at Lasso Security and would like to **privately** report a security issue in LangChain-Chatchat. We couldn't find a private disclosure channel — there's no `SECURITY.md`, GitHub Private Vulnerability Reporting appears to be disabled, and we didn't find a security contact email. Could you please either: - **enable Private Vulnerability Reporting** for this repo (Settings → *Code security and analysis* → *Private vulnerability reporting*), or - share a **private security contact** (email) we can use? To protect users, we're intentionally **not including any details here**. We'll send the full report through whichever private channel you prefer, and follow coordinated-disclosure practices. Thanks!
内容来源: chatchat-space/Langchain-Chatchat