SECURITY.md contact is unreachable — request for private vulnerability disclosure channel

Author: yii-llcCreated Jun 14, 2026Updated Jun 16, 2026

Hi restify maintainers,

I am trying to privately report a security vulnerability affecting restify / node-restify.

I followed the SECURITY.md instructions and attempted to contact [email protected], but the message was not delivered. The remote mail server returned:

554 5.7.1 Relay access denied

I also contacted prior maintainers and was advised to reach out to the current maintainers.

I do not want to disclose any technical vulnerability details publicly.

Could you please confirm the correct private security reporting channel, or enable GitHub Private Vulnerability Reporting for this repository?

cc @DonutEspresso @wesleytodd

Thanks, Nir Yehoshua Cipher Security Labs