I have a security issue to report in this library and I couldn't find a private channel for it.
There's no SECURITY.md in the repository and private vulnerability reporting isn't enabled under Settings > Security, so there's no "Report a vulnerability" button on the Security tab.
Could you enable it, or give me an address to use? It's a memory-exhaustion issue reachable from a public API with a very small input, and I have a reproduction ready. I'll send the details as soon as there's somewhere private to send them.
Not describing it here on purpose. Happy to wait for whichever route you prefer.
I have a security issue to report in this library and I couldn't find a private channel for it.
There's no
SECURITY.mdin the repository and private vulnerability reporting isn't enabled under Settings > Security, so there's no "Report a vulnerability" button on the Security tab.Could you enable it, or give me an address to use? It's a memory-exhaustion issue reachable from a public API with a very small input, and I have a reproduction ready. I'll send the details as soon as there's somewhere private to send them.
Not describing it here on purpose. Happy to wait for whichever route you prefer.