Where to submit a vulnerability report?

Good morning guys,

I recently encounter a vulnerability in a repo from Weaviate, but I cannot a find a suitable place to report the vuln. The advisory in GitHub repo is not yet enabled.

On the other hand, I mostly don’t submit vuln in Issue section in GitHub to avoid early disclosure.

Could anyone show me the appropriate way to report the bug? If there aren’t any, I would contact directly via email.

Thank you and have a good day.

Hey, please send us an email to security@weaviate.io

For more information, check this page as well: Report a Security Vulnerability | Weaviate