Vulnerability Disclosure Process?

[Boo]

Hi,

I'm new to Opnsense so don't know what your processes are, I've stumbled upon a way to get a root shell without a login. Is there a process that isn't the public forum to disclose a vulnerability?

Thanks

[franco]

Hi,

Either unencrypted via project@opnsense.org or encrypted via security@opnsense.org (key should be on the cool GPG keyservers).


Cheers,
Franco