Private security report: disclosure channel requested

Hello Plandex maintainers,

I found a reproducible security issue affecting this repository and would like to report it privately.

I attempted GitHub Private Vulnerability Reporting on 2026-06-05, but the API returned HTTP 403 indicating that private vulnerability reporting is not enabled for this repository. I do not want to disclose technical details, impact, or reproduction steps in a public issue.

Could you please enable GitHub Private Vulnerability Reporting or provide a preferred private security contact for this report?

I can provide the affected commit, affected components, local non-destructive PoC, impact analysis, and suggested fix through a private channel.

Thank you.