Security issue to report privately — requesting a contact method

Hello,

I found a security issue in the WebUI mode of this project that I would like to report responsibly before it becomes public. Since this repository does not have GitHub's private vulnerability reporting enabled and has no SECURITY.md, I don't have a private channel to send the details through.

Could you share an email address, or enable GitHub's private vulnerability reporting under the repository's Security tab, so I can send you the full report? I'm happy to work with you on a disclosure timeline.

Thank you for your time on this project.