Reporting Potential Security Vulnerabilities in the Clojure Codebase

108 views

Skip to first unread message

William Blair

unread,

Jul 17, 2021, 3:21:56 PM7/17/21

to Clojure

Does the Clojure project have a protocol in place for reporting potential security vulnerabilities found in the runtime? I'd be happy to share a proof of concept I have so that the developers can assess whether or not what I've found is a true vulnerability.

Alex Miller

unread,

Jul 18, 2021, 3:29:08 PM7/18/21

to Clojure

If you want to report something privately, you can email it to clo...@cognitect.com.