This repository holds the public website of the TUM.ai Makeathon, makeathon.tum-ai.com. The site has no accounts, forms or database, but we take every report about it seriously.
Please do not open a public issue. Report it privately instead:
- through GitHub's private vulnerability reporting for this repository, or
- by email to makeathon@tum-ai.com with "Security" in the subject.
Include what you found, where, and how to reproduce it. We aim to confirm receipt within a week, keep you posted while we work on a fix, and credit you if you wish.
In scope: this repository, its GitHub Actions workflows and the deployed site. Other TUM.ai services, including tum-ai.com, are out of scope here; report those to the same address.
Please don't run automated scanners against the site or test denial of service.