@@ -31,15 +31,13 @@ LangChain is partnered with [huntr by Protect AI](https://huntr.com/) to provide
31
31
a bounty program for our open source projects.
32
32
33
33
Please report security vulnerabilities associated with the LangChain
34
- open source projects by visiting the following link:
35
-
36
- [ https://huntr.com/bounties/disclose/ ] ( https://huntr.com/bounties/disclose/?target=https%3A%2F%2Fgithub.com%2Flangchain-ai%2Flangchain&validSearch=true )
34
+ open source projects [ here] ( https://huntr.com/bounties/disclose/?target=https%3A%2F%2Fgithub.com%2Flangchain-ai%2Flangchain&validSearch=true ) .
37
35
38
36
Before reporting a vulnerability, please review:
39
37
40
38
1 ) In-Scope Targets and Out-of-Scope Targets below.
41
39
2 ) The [ langchain-ai/langchain] ( https://python.langchain.com/docs/contributing/repo_structure ) monorepo structure.
42
- 3 ) The [ Best practices ] ( #best-practices ) above to
40
+ 3 ) The [ Best Practices ] ( #best-practices ) above to
43
41
understand what we consider to be a security vulnerability vs. developer
44
42
responsibility.
45
43
@@ -64,7 +62,7 @@ All out of scope targets defined by huntr as well as:
64
62
bounties. This includes the following directories
65
63
- libs/langchain/langchain/tools
66
64
- libs/community/langchain_community/tools
67
- - Please review the [ best practices ] ( #best-practices )
65
+ - Please review the [ Best Practices ] ( #best-practices )
68
66
for more details, but generally tools interact with the real world. Developers are
69
67
expected to understand the security implications of their code and are responsible
70
68
for the security of their tools.
0 commit comments