Github Security Advisory submissions

[Michael-JRead]

Hello,

I wanted to follow up regarding security advisories (GHSAs) that have been submitted to the project.

I have several reports that have now gone about two weeks without acknowledgment or comment from any maintainer.

Could you share whether the project has a defined timeline for acknowledging or triaging security reports submitted by the community?

I'm not looking to rush a fix — I just want to confirm the report was received and understand what response contributors can reasonably expect.

[hectorvent]

Hey Michael,

We received it. We will go over then and apply the fixes soon. Thank you for keeping pushing on this.

[Michael-JRead]

Thanks Hector, appreciate the response. Looking forward to working with y'all... Love this project!

[Wael-Rd]

Hi,

Quick follow-up: one of my security advisory submissions has been pending for nearly two months with no update.

Is there a current backlog or review process for submitted GHSAs? I’d mainly like to confirm the report is still in the queue and hasn’t been missed.

Thanks!