Repository navigation

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

This product currently has no support and is experimental. That could change in future.

Reporting a Vulnerability

Please report any issues or vulerabilities with an issue.

Unauthenticated disclosure of pre-publication (draft/expired) Forest Operations Map metadata and spatial geometry
GHSA-3rj9-q76h-j3q6 published Sep 10, 2026 by DerekRoberts

Moderate
Unauthenticated SQL injection in bcgov/nr-fom via the public comment create endpoint (sensitive-column encryption interpolates request fields into raw SQL)
GHSA-qr44-2mx7-pwvq published Sep 4, 2026 by DerekRoberts

Critical

Learn more about advisories related to bcgov/nr-fom in the GitHub Advisory Database