Request for Contact about the security issue reporting of the RaspAP

[YichaoXu]

Hi there,

We reported a vulnerability to the email address "[email protected]" listed on the security policy page, but we have not received a response within a long time.

It seems our email may not have reached the right team. Does anyone know of alternative contact methods for the developers responsible for security issues related to this repo?

Thank you,

[billz]

You'll need to be more specific about who "we" is (you, or someone else?). Most of the mail received on our security alias is spam, unfortunately, so it's treated with a low priority.

[YichaoXu]

Hi Billz, thank you for your response. We are the security research team at JHU. I have resent the email regarding the attack we discussed. I have already forwarded the email again by email account "[email protected]". The attack can be easily replayed using the payloads we provided, due to a minor issue with sanitization.
Best,
Sam