Trying to get in touch regarding a security issue

[JamieSlome]

Hi there,

I couldn't find a SECURITY.md in your repository and am not sure how to best contact you privately to disclose a security issue.

Can you add a SECURITY.md file with an e-mail to your repository, so that our system can send you the vulnerability details? GitHub suggests that a security policy is the best way to make sure security issues are responsibly disclosed.

Once you've done that, you should receive an e-mail within the next hour with more info.

Thanks! (cc @huntr-helper)

[antonioru]

Hi @JamieSlome thank you very much for your message, I don't know why this went off my radar...
anyway... at the moment I'm not actively maintaining this library (unfortunately), but I'll do me best to add the SECURITY.md file as per your request...

[JamieSlome]

@antonioru - appreciate your response and not a problem at all!

You can find the report here:
https://huntr.dev/bounties/2f42873d-83d7-4006-aa0e-65d085c01071/

Just an thought regarding your security policy, but you could always point people to:
https://huntr.dev/repos/antonioru/deep-waters