Unrated
New HackerOne Signal Requirement for Vulnerability Reports
The Node.js Project requires a HackerOne Signal of 1.0 or higher to submit vulnerability reports through HackerOne. Researchers below that threshold can contact the security team through the OpenJS Foundation Slack.
Announced Source revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
We have updated our HackerOne program to require a Signal of 1.0 or higher to submit vulnerability reports to the Node.js project.
Node.js
submit vulnerability reports to the Node.js project
- Affected versions
- Not stated in this extraction
- Fixed versions
- Not stated in this extraction
- Prerequisites
- Signal of 1.0 or higher
require a Signal of 1.0 or higher to submit vulnerability reports to the Node.js project
Publisher severity
No explicit severity was extracted.
- Event
- #19343 · Revision 1
- Added to Heist Feed
- Publisher date