1+ name : Security Vulnerability
2+ description : Report a security vulnerability (please use private disclosure if critical)
3+ title : " [Security]: "
4+ labels : ["security", "ai-review"]
5+ body :
6+ - type : markdown
7+ attributes :
8+ value : |
9+ ⚠️ **IMPORTANT: For critical vulnerabilities, please use GitHub's private vulnerability reporting**
10+
11+ This issue will be automatically analyzed by AI for security assessment.
12+
13+ - type : dropdown
14+ id : severity
15+ attributes :
16+ label : Severity (Your Assessment)
17+ description : How severe do you think this vulnerability is?
18+ options :
19+ - Critical - Immediate exploitation possible
20+ - High - Serious security risk
21+ - Medium - Moderate security concern
22+ - Low - Minor security issue
23+ - Info - Security best practice suggestion
24+ validations :
25+ required : true
26+
27+ - type : textarea
28+ id : description
29+ attributes :
30+ label : Vulnerability Description
31+ description : Describe the security vulnerability
32+ placeholder : There is a potential security issue with...
33+ validations :
34+ required : true
35+
36+ - type : dropdown
37+ id : type
38+ attributes :
39+ label : Vulnerability Type
40+ description : What type of vulnerability is this?
41+ options :
42+ - SQL Injection
43+ - Cross-Site Scripting (XSS)
44+ - Cross-Site Request Forgery (CSRF)
45+ - Authentication Bypass
46+ - Authorization Issue
47+ - Sensitive Data Exposure
48+ - Security Misconfiguration
49+ - Insecure Dependencies
50+ - Denial of Service (DoS)
51+ - Code Injection
52+ - Other
53+ validations :
54+ required : true
55+
56+ - type : textarea
57+ id : impact
58+ attributes :
59+ label : Impact
60+ description : What is the potential impact of this vulnerability?
61+ placeholder : An attacker could...
62+ validations :
63+ required : true
64+
65+ - type : textarea
66+ id : reproduction
67+ attributes :
68+ label : Steps to Reproduce
69+ description : How can this vulnerability be reproduced?
70+ placeholder : |
71+ 1. Configure...
72+ 2. Send request...
73+ 3. Observe...
74+ validations :
75+ required : true
76+
77+ - type : textarea
78+ id : poc
79+ attributes :
80+ label : Proof of Concept
81+ description : Provide a proof of concept (redact sensitive info)
82+ render : python
83+
84+ - type : textarea
85+ id : affected
86+ attributes :
87+ label : Affected Versions
88+ description : Which versions are affected?
89+ placeholder : All versions, or specific versions...
90+
91+ - type : textarea
92+ id : mitigation
93+ attributes :
94+ label : Suggested Mitigation
95+ description : If you have suggestions on how to fix this, please share
96+ placeholder : This could be fixed by...
97+
98+ - type : textarea
99+ id : references
100+ attributes :
101+ label : References
102+ description : Any relevant CVEs, CWEs, or references
103+ placeholder : |
104+ - CWE-XXX
105+ - CVE-XXXX-XXXXX
106+ - https://...
0 commit comments