Potential security issue – request for private disclosure channel

[yotampe-pluto]

Hi 👋

I believe I’ve identified a security issue in this project that may have
serious impact depending on deployment configuration.

I looked for a private security reporting channel but the SECURITY.md
contact email is blank.
Could you please let me know the preferred way to report security
issues responsibly?

I’m happy to coordinate disclosure and provide details privately.

Thanks, and appreciate the work you’re doing on this project.