Security vulnerability

[xbow-security]

Hello - Hope this message finds you well. While running a penetration test using XBOW (https://xbow.com/), we found a security vulnerability on your product. Could you please enable Github Private Vulnerability Reporting (PVR) so we can privately share the details and collaborate on verifying the fix or provide the best contact info?

[StefH]

Thank you for analysis.

I think I did enable private reporting. So you can share details.

[xbow-security]

Hi there, we can only see the ability to 'suggest a policy' in the Security Tab. To enable Private Vulnerability Reporting (PVR) there are a couple other steps detailed here.

[StefH]

Please try again. I did enable it on this project.

[StefH]

I've added a comment to your report, can you reply on that one?