web vulnerability in a fedora asset

[osama emad]

i believe i found an xss in an asset owned by fedora, how to report that ?

[Kevin Fenzi]

On Tue, Feb 25, 2025 at 05:20:26PM +0000, osama emad wrote:
> i believe i found an xss in an asset owned by fedora, how to report that ?

On a fedoraproject.org web site/app? You can file a private ticket on
https://pagure.io/fedora-infrastructure/issues

If it's something in a package shipped by fedora, please file a bug on
bugzilla.redhat.com for the package.

kevin