SECURITY.md

In EXASOL/r-exasol: R Interface & SDK for the EXASOL Database

Security

If you believe you have found a new security vulnerability in this repository, please report it to us as follows.

Reporting Security Issues

• Please do not report security vulnerabilities through public GitHub issues.

• Please create a draft security advisory on the Github page: the reporting form is under > Security > Advisories. The URL is https://github.com/exasol/r-exasol/security/advisories/new.

• If you prefer to email, please send your report to [e-mail].

Guidelines

• When reporting a vulnerability, please include as much information as possible, including the complete steps to reproduce the issue.

• Avoid sending us executables.

• Feel free to include any script you wrote and used but avoid sending us scripts that download and run binaries.

• We will prioritise reports that show how the exploits work in realistic environments.

• We prefer all communications to be in English.

• We do not offer financial rewards. We are happy to acknowledge your research publicly when possible.

EXASOL/r-exasol documentation built on June 2, 2025, 1:44 p.m.