Security disclosure: request for a private reporting channel

[sec-reex]

Hi maintainers,

I believe I have identified a potential security issue in this project. I did not find an enabled Private Vulnerability Reporting option or a security contact/policy in this repository, so I am opening this issue only as a contact request — no vulnerability details are included here.

Could you please let me know the preferred private channel (for example a security email address, a draft security advisory, or your disclosure process) where I can share reproduction steps and impact details?

Thank you.

[probelabs]

Hi @sec-reex,

Thank you for your responsible approach and for reaching out to us. We take security very seriously.

You can disclose security vulnerabilities privately by emailing security@tyk.io. Please include a detailed report with reproduction steps and any other relevant information.

Once you have sent the details to that address, we can close this public issue to ensure the conversation remains private.

Thank you again for helping to keep Tyk secure.

Triage

• Category: Security
• Priority: Urgent
• Next Steps: Await private disclosure via email.

---

Powered by Visor from Probelabs

💡 TIP: You can chat with Visor using /visor ask <your question>