Request for private security reporting channel
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 20/100
- Issue 类型
- 功能
- 描述清晰度
- 需要澄清
- 活跃度
- 活跃
- 领域
- security
调研方向
The issue names no source file, test, or entry point; begin with the repository's existing security guidance and review how private reports are currently requested. Done means maintainers provide or document an approved private reporting channel without exposing vulnerability details in this issue.
由索引模型根据 Issue 内容生成。
描述
Product or interface
Desktop app
Version
0.5.4
Platform
Windows
OS version and architecture
Windows 11 x64
Issue area
Other
Desktop log upload ID (optional)
No response
Steps to reproduce
I found multiple reproducible security issues in the current MiniMax Code source preview while performing external security testing.
I have minimal synthetic reproductions, regression tests, and redacted evidence prepared, but I do not want to disclose vulnerability details in a public issue.
Please provide the appropriate private reporting channel so I can share the findings responsibly.
Expected and actual behavior
Expected: A private security reporting channel should be available for disclosure of vulnerability details.
Actual: The repository security guidance directs reporters to request a private channel when private vulnerability reporting is unavailable. I am opening this issue only to request that channel and am intentionally withholding vulnerability details from the public issue.
Redacted error summary
Multiple reproducible security findings are ready for private disclosure. No credentials, real user data, destructive actions, or third-party infrastructure were used during testing.
Screenshots
No response
Before submitting
- I have searched existing issues.
- I have included my version and removed sensitive information.
- 主要语言
- TypeScript
- 星标
- 2k
- 派生
- 259
- 平均合并
- 14 小时 20 分钟
- 30 天内合并 PR
- 56
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
MiniMax-AI/minimax-code 的其他 Issue
-
难度 2/5 1-3 小时 新手友好度 78/100
MiniMax-AI/minimax-code#507 ·
维护者通常 1 天内回复
-
bug needs-triage tui
难度 2/5 1-3 小时 新手友好度 72/100
MiniMax-AI/minimax-code#481 · 1 条评论 ·
维护者通常 1 天内回复
-
bug cli documentation needs-triage
难度 2/5 1-3 小时 新手友好度 84/100
MiniMax-AI/minimax-code#299 · 3 条评论 ·
维护者通常 1 天内回复
-
难度 5/5 一周以上 新手友好度 35/100
MiniMax-AI/minimax-code#540 ·
维护者通常 1 天内回复
-
难度 4/5 3-5 天 新手友好度 38/100
MiniMax-AI/minimax-code#539 ·
维护者通常 1 天内回复
查看 MiniMax-AI/minimax-code 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 76/100
openremote/openremote#3487 · 1 条评论 ·
-
难度 2/5 1-3 小时 新手友好度 82/100
coollabsio/jean#867 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 76/100
ehmpathy/rhachet-roles-bhuild#616 ·
维护者通常 1 天内回复
-
📘 Docs supabase/cli
难度 2/5 1-3 小时 新手友好度 83/100
维护者通常 1 天内回复
-
bug(cli): theme file home-directory check uses startsWith (sibling dirs pass, Windows casing fails)未关闭area/core kind/bug priority/p2 status/bot-triaged
难度 2/5 1-3 小时 新手友好度 79/100
google-gemini/gemini-cli#29955 · 2 条评论 ·
维护者通常 1 天内回复