Security: Preferred contact for a private security report

[dngen]

Hello,

I have a security report concerning basic-http-server that I would like to share privately before any public discussion. I did not find a SECURITY.md file, and GitHub private vulnerability reporting does not currently appear to be enabled for this repository.

Could you enable GitHub private vulnerability reporting or let me know your preferred private contact method? I will keep the technical details out of this public issue.

Thanks.

[dngen]

Friendly follow-up on this security report. The encrypted private report
was provided earlier. Please let me know whether it was received and
whether you would prefer additional reproduction details or coordination
through another channel.

No public exploit details are being added here.