Security disclosure request — please provide a private reporting channel

[harshinsecurity]

Hi team,

I've conducted security research on tupper and found several vulnerabilities I'd like to report responsibly.

Your security policy link returns a 404, and private advisory reporting doesn't appear to be enabled. I'm opening this discussion only to request a private channel — no vulnerability details will be shared here.

Could you please :

• Enable GitHub Private Security Advisories (Settings → Security → Private vulnerability reporting)

I'll send the full report with PoCs and remediation suggestions once a secure channel is established.

Thanks