Security issue

[vdeturckheim]

Hello,

As a member of the Node.js ecosystem security team I have been reported a security issue regarding this package.

I have contacted the person I identified as maintainer by email but did not get any answer. What is the best way to reach someone with commit rights over this repo do privately explain what is the issue?

Best
Vladimir de Turckheim

[vivaxy]

@vdeturckheim Sorry, I have not paid attention to the email. Please let me know what's the reason of the vulnerability.

[vdeturckheim]

Hey @vivaxy thanks for your answer, in order to not publicly disclose the vulnerability, can I invite you on HackerOne with your public email address? You'll be able to review the report and interact with the person who found the issue.

[vivaxy]

@vdeturckheim Please invite me, thanks.

[vdeturckheim]

Done, you should have received an email @vivaxy