Security contact for private Nextflow vulnerability report

[baradika]

Hi Nextflow maintainers,

I would like to privately report a security issue affecting generated Nextflow HTML reports.

I could not find an active SECURITY.md or GitHub private vulnerability reporting button for this repository. Could you please let me know the preferred private channel for sending the full technical report and PoC?

I will avoid posting vulnerability details publicly.

Thanks

[bentsherman]

There should be a button on this page to report a vulnerability: https://github.com/nextflow-io/nextflow/security

[baradika]

where

[bentsherman]

I see. I thought we had a button set up for this. Let me check with the team, will get back to you tomorrow

[baradika]

alright

[bentsherman]

There should be a report button now

https://github.com/nextflow-io/nextflow/security/advisories