Private Vulnerability Reporting Channel.

[victim68]

Hi @e-fu , I have discovered a security vulnerability in this repository. I would like to report it responsibly, but I cannot find a security policy or contact email. Please provide a way to contact the maintainers privately (e.g., an email address or by enabling Private Vulnerability Reporting in the Security tab) so I can disclose the details.

Thank you!

[e-fu]

Hi @victim68 — thanks for flagging this. We've added a SECURITY.md and enabled GitHub Private Vulnerability Reporting. Please don't post any details here — instead use the "Report a vulnerability" button on the Security tab. We'll follow up from there.