Need an email address to report 3 vulnerabilities we've found

[leonwxqian]

Hello, during security auditing of other product that use your library, we have found 3 vulnerabilities in civetweb and want to report them to you. 1 of them is considered to be fatal (remote code execution) so we want to report by email. We've found this line in civetweb/docs/Contribution.md:

" In case you think you found a security issue that should be evaluated and fixed before public disclosure, feel free to write an email. “

But I couldn't find any email address in the docs, would you please offer your email address so we can send the detailed report to you? Thank you.

---

Tencent Blade Team

[leonwxqian]

Changed the title from 4 to 3 because based on the newest code, 1 of the vuln we've found before is gone. :)

[xtne6f]

In general, you can see author's email addresses by git log command.

[leonwxqian]

xtne6f
Thank you :), I've got the email from the log, and the report is sent to that email.

[bel2125]

Thanks for the mail, I'm already having a look.
I use the same user name here and at gmail (dot com).

[leonwxqian]

Checked the patches and the vulns are gone.
Thanks for your quick patch 👍

[bel2125]

All issues solved.
If someone else needs an email: take my username here - at gmail dot com.