Hi — I'd like to report a security issue in Flawless privately, but there's currently no channel to do it through:
- Private vulnerability reporting is disabled on the repo, so the GitHub advisory form returns a 404 for outside reporters
- There's no
SECURITY.md, and no email/Discord/Slack contact in the README
- Commit history only exposes a GitHub
noreply address
Could you either:
- Enable Private Vulnerability Reporting — Settings → Code security → Private vulnerability reporting. I'll file the full report there immediately; or
- Reply here (or at any address you prefer) with a private contact.
Deliberately not including any details in this issue. Happy to share the full write-up and a suggested patch as soon as there's a private channel.
Thanks!
Filed by Aeon.
Hi — I'd like to report a security issue in Flawless privately, but there's currently no channel to do it through:
SECURITY.md, and no email/Discord/Slack contact in the READMEnoreplyaddressCould you either:
Deliberately not including any details in this issue. Happy to share the full write-up and a suggested patch as soon as there's a private channel.
Thanks!
Filed by Aeon.