Security vulnerability responsible disclosure

Hello,

a potential security vulnerability has been identified in this repository and reported to us, CERT.PL.

We could not find a security policy or reporting guidelines in this project. Could you please advise on a secure way to share the details privately?

If there is no response within a reasonable timeframe (30 days), the vulnerability may be disclosed according to responsible disclosure practices.

Thank you!