I would like to report a security issue in this project privately, but I could not find a channel for it:
- "Private vulnerability reporting" is not enabled on this repository (Settings → Security), so the "Report a vulnerability" button is not available.
- There is no
SECURITY.md in the repo or at the organization level.
Could you either enable private vulnerability reporting on this repository, or point me to a security contact (e.g. a PSIRT address) so I can send the details privately?
I have a minimal reproducer and a suggested fix ready. I am not including any details here, to avoid public disclosure before a fix is available. Thank you.
I would like to report a security issue in this project privately, but I could not find a channel for it:
SECURITY.mdin the repo or at the organization level.Could you either enable private vulnerability reporting on this repository, or point me to a security contact (e.g. a PSIRT address) so I can send the details privately?
I have a minimal reproducer and a suggested fix ready. I am not including any details here, to avoid public disclosure before a fix is available. Thank you.