Hello maintainers,
I have a responsibly disclosed security finding (Medium severity) affecting this project. I could not find a private reporting channel: GitHub private vulnerability reporting is not enabled on this repo, and I did not find a SECURITY.md or a security.txt with a contact.
I am intentionally not including any details here, to avoid disclosing the issue publicly before you can address it.
Could you please provide a secure way for me to share the report privately? Any of these works:
- enable GitHub private vulnerability reporting (Settings, then Security, then Report a vulnerability), or
- a security email address, or
- another private channel you prefer.
I will send the full write up (root cause, affected code, and a suggested fix) as soon as a private channel is available, and I am happy to follow any coordinated disclosure window you use.
Thank you,
Simeon Petkov
github.com/SimSans
simeon.petkov2110@gmail.com
Hello maintainers,
I have a responsibly disclosed security finding (Medium severity) affecting this project. I could not find a private reporting channel: GitHub private vulnerability reporting is not enabled on this repo, and I did not find a SECURITY.md or a security.txt with a contact.
I am intentionally not including any details here, to avoid disclosing the issue publicly before you can address it.
Could you please provide a secure way for me to share the report privately? Any of these works:
I will send the full write up (root cause, affected code, and a suggested fix) as soon as a private channel is available, and I am happy to follow any coordinated disclosure window you use.
Thank you,
Simeon Petkov
github.com/SimSans
simeon.petkov2110@gmail.com