Dear Peter (@pas256) and Joarley (@joarleymoraes),
I am a PhD researcher at the University of London, and, as recommended by the GitHub process for coordinated disclosure of security vulnerabilities, I am reaching out to ask for a preferred security contact.
The static analyser I am using to conduct my research has reported a vulnerability that is worth discussing privately.
You can find my contact details on the university website. Alternatively, do not hesitate to get in touch on LinkedIn.
Look forward to hearing from you.
Kind regards,
Giuseppe Raffa