Hi, could you enable GitHub's private vulnerability reporting on this repo (Settings > Security > "Private vulnerability reporting")? There's no SECURITY.md or other channel right now, so a public issue is the only way to report a security bug, which isn't great for anything pre-disclosure. I have a couple of memory-safety findings in the parser code I'd like to send privately. Thanks.
Hi, could you enable GitHub's private vulnerability reporting on this repo (Settings > Security > "Private vulnerability reporting")? There's no SECURITY.md or other channel right now, so a public issue is the only way to report a security bug, which isn't great for anything pre-disclosure. I have a couple of memory-safety findings in the parser code I'd like to send privately. Thanks.