Series Ai Vulnerability Disclosure

generated: '2026-07-21'
method: searched
source: https://github.com/series-ai/run-workshop/blob/main/SECURITY.md
name: Series AI Vulnerability Disclosure
description: >-
  Series AI accepts private vulnerability reports for its open-source RUN.world
  tooling through GitHub's private vulnerability reporting. There is no published
  security.txt on series.inc and no public bug-bounty program was found.
policy_url: https://github.com/series-ai/run-workshop/blob/main/SECURITY.md
reporting:
  channel: GitHub private vulnerability reporting (Security Advisories)
  url: https://github.com/series-ai/run-workshop/security/advisories/new
  fallback: contact repository maintainers through a private channel (do not open a public issue)
  acknowledgement_target: within three business days
  disclosure: coordinated with reporter when a fix is ready
supported_versions: default branch only; older tags/branches not actively supported
in_scope:
- Secrets or credentials committed to the repository
- CI/CD workflows that expose secrets or run untrusted code with elevated privileges
- Supply-chain changes (dependencies, GitHub Actions, release scripts) weakening repo security
- Vulnerabilities in code shipped from the repository
out_of_scope:
- Platform, account, or production RUN infrastructure issues (report via RUN support channels)
bug_bounty:
  present: false
security_txt:
  present: false
  probed:
  - "https://series.inc/.well-known/security.txt -> 404"