contact for security disclosure

[invd]

I recently discovered several memory safety issues in the gpmf-parser code and want to report them confidentially through a coordinated disclosure process.

However, the project mentions no contact address and I've been unable to reach @dnewman-gpsw and @tcheema-gpsw via email so far. Please provide a suitable email contact, preferably with a matching PGP pubkey.

Note: to simplify future reports, I recommend the addition of a SECURITY.md file with disclosure guidelines.

[dnewman-gpsw]

For others: bugbounty@gopro.com

invd, the security team will be in contact with you, I have forwarded them your email information.