Security Issue - Missing Security Policy

[Sideni]

Hello there fellow erlang-jose maintainers,

I've discovered a vulnerability on erlang-jose which I'd like to report.
As there is currently no security policy on the repo, I wonder what would be the best way to discuss it and work on a fix?
A security advisory with a temporary private fork would probably be the best.

Let me know how we can proceed :)

[Sideni]

@potatosalad Could you by any chance enable private vulnerability reporting on the repo so that I could document and discuss the issue with you privately ? :)

[Neustradamus]

@potatosalad: Have you seen this ticket?