Security issue, no way to notify privately

[idawson-gl]

Vineflower version

Hello I'd like to report an issue & patch but it doesn't look like your team has configured private vulnerability reporting. Let me know how best to get this to ya'll without having to sign up to discord.

Thanks!

[zml2008]

I don't see what in vineflower would need to be reported privately, unless you're talking about some sort of zip slip thing lol.

[idawson-gl]

I don't see what in vineflower would need to be reported privately, unless you're talking about some sort of zip slip thing lol.

I mean, exactly that?

[zml2008]

open a pr

[idawson-gl]

#448