Hi maintainers,
We're security researchers at Lasso Security and would like to privately report a security issue in Langchain-Chatchat. We couldn't find a private disclosure channel — there's no SECURITY.md, GitHub Private Vulnerability Reporting appears to be disabled, and we didn't find a security contact email.
Could you please either:
- enable Private Vulnerability Reporting for this repo (Settings → Code security and analysis → Private vulnerability reporting), or
- share a private security contact (email) we can use?
To protect users, we're intentionally not including any details here. We'll send the full report through whichever private channel you prefer, and follow coordinated-disclosure practices.
Thanks!
各位维护者好：我们是 Lasso Security 的安全研究人员，希望私下上报 Langchain-Chatchat 的一个安全问题，但没有找到私有上报渠道（无 SECURITY.md，GitHub 私有漏洞上报未开启，也未找到安全联系邮箱）。能否请你们开启 Private Vulnerability Reporting（仓库 Settings → Code security and analysis → Private vulnerability reporting），或提供一个私有安全联系邮箱？为保护用户，此处不包含任何细节，我们会通过你们指定的私有渠道发送完整报告，并遵循协调披露流程。谢谢！
Hi maintainers,
We're security researchers at Lasso Security and would like to privately report a security issue in Langchain-Chatchat. We couldn't find a private disclosure channel — there's no
SECURITY.md, GitHub Private Vulnerability Reporting appears to be disabled, and we didn't find a security contact email.Could you please either:
To protect users, we're intentionally not including any details here. We'll send the full report through whichever private channel you prefer, and follow coordinated-disclosure practices.
Thanks!
各位维护者好：我们是 Lasso Security 的安全研究人员，希望私下上报 Langchain-Chatchat 的一个安全问题，但没有找到私有上报渠道（无
SECURITY.md，GitHub 私有漏洞上报未开启，也未找到安全联系邮箱）。能否请你们开启 Private Vulnerability Reporting（仓库 Settings → Code security and analysis → Private vulnerability reporting），或提供一个私有安全联系邮箱？为保护用户，此处不包含任何细节，我们会通过你们指定的私有渠道发送完整报告，并遵循协调披露流程。谢谢！