Sending to the dev list and/or creating an issue on https://issues.apache.org/jira/browse/ZOOKEEPER would be super great!
- Hongchao Deng > Date: Thu, 19 Feb 2015 16:19:28 -0800 > Subject: Where to send vulnerability disclosures? > From: [email protected] > To: [email protected] > > We discovered last year some behavior in ZK that can trigger DoS with very > low complexity. We are now writing a blog post on our findings (and other > surrounding it) but would like to send mail to the responsible disclosure > list before doing so. > > Where should I direct responsible disclosures? Thanks in advance. > > -- > evan
