Skip to main content
Gerfaut is written and maintained by Loïc Morel. Pick the channel that fits what you have to say.

Ask a question

Write to info@pandul.fr, in English or in French.

Report a bug or suggest a change

Open an issue in English on the repository concerned:

Report a security vulnerability

Never report a vulnerability in a public issue. The SECURITY.md file of each code repository, such as gerfaut-desktop, sets out the scope and the disclosure terms.
Report it privately on GitHub, or by e-mail to info@pandul.fr if you have no GitHub account.
1

Open a private report on GitHub

On the repository concerned, select Security, then Report a vulnerability. Only you and the maintainer see the report.
2

Describe what you found

Include what you can:
  • Type: The kind of issue and the component affected.
  • Reproduction: Steps to reproduce, or a proof of concept.
  • Impact: How you assess it.
  • Fix: Any fix you suggest.
3

Wait for the acknowledgement

You get an acknowledgement within seven days, then a verdict and news while a fix is under way.