SECURITY.md contact is unreachable — request for private vulnerability disclosure channel
Author: yii-llcCreated Jun 14, 2026Updated Jun 16, 2026
Hi restify maintainers,
I am trying to privately report a security vulnerability affecting restify / node-restify.
I followed the SECURITY.md instructions and attempted to contact [email protected], but the message was not delivered. The remote mail server returned:
554 5.7.1 Relay access denied
I also contacted prior maintainers and was advised to reach out to the current maintainers.
I do not want to disclose any technical vulnerability details publicly.
Could you please confirm the correct private security reporting channel, or enable GitHub Private Vulnerability Reporting for this repository?
cc @DonutEspresso @wesleytodd
Thanks, Nir Yehoshua Cipher Security Labs
Source: restify/node-restify