Repository navigation
Request for a Private Security Vulnerability Reporting Channel #407
Description
Hello Gemmini maintainers,
We are academic researchers conducting RTL-level security analysis of Gemmini.
We have identified and independently reproduced a potentially security-relevant hardware issue in an unmodified upstream revision. We would like to report it responsibly and provide the technical evidence through a private channel.
We could not find a published security policy or an enabled private vulnerability reporting option in the repository.
Could you please enable GitHub Private Vulnerability Reporting or let us know the preferred private security contact?
We can provide a minimal reproducer, affected revision, RTL traces, and our initial impact assessment.
Thank you.
Activity