Private security advisory submitted on Aug 30 — please confirm receipt

Hi

On Aug 30, 2026 I submitted a security report through GitHub's private vulnerability reporting channel (Security Advisories) for this repository — reference GHSA-pxhc-8hfg-67xj. It has been sitting in triage state since then.

Could a maintainer please confirm that the private channel can receive it and that it has reached the right person? Happy to answer any questions in the private thread.

No technical details are included here on purpose — everything is in the private advisory. Thanks!