Hi, I have a security issue I'd like to report but there's no private channel for this repo (no SECURITY.md, and GitHub's private vulnerability reporting is turned off).
Could you enable "Private vulnerability reporting"? It's under Settings > Security & analysis (Advanced Security) > Private vulnerability reporting. It lets people file a report from the Security tab and gives you a private draft advisory to coordinate a fix before anything is public.
Happy to send the details as soon as there's a private channel. Thanks.
Hi, I have a security issue I'd like to report but there's no private channel for this repo (no SECURITY.md, and GitHub's private vulnerability reporting is turned off).
Could you enable "Private vulnerability reporting"? It's under Settings > Security & analysis (Advanced Security) > Private vulnerability reporting. It lets people file a report from the Security tab and gives you a private draft advisory to coordinate a fix before anything is public.
Happy to send the details as soon as there's a private channel. Thanks.