Only the latest version of glide-py published on PyPI receives security fixes.
Please do not open a public GitHub issue for security vulnerabilities, as this would disclose the issue before a fix is available.
To report a vulnerability, use the "Report a vulnerability" button in the Security and Quality tab of this repository. This opens a draft private advisory visible only to you and the maintainers.
Please include as much of the following as possible: a description of the vulnerability, the affected version(s), steps to reproduce, and any proof-of-concept code.
- Acknowledgement: within 5 business days of receiving your report.
- Triage and initial fix plan: within 14 calendar days of acknowledgement.
We will keep you informed as the fix progresses and will credit you in the security advisory unless you prefer to remain anonymous.
Vulnerabilities in GLIDE's dependencies (NumPy, SciPy, etc.) should be reported directly to those projects. We will update our dependencies when upstream fixes are available.