Contact email missing in SECURITY.md

[mcfly-zzh]

Hi, I wanted to report a security issue privately, but I noticed that SECURITY.md asks researchers to report vulnerabilities via email while the email link appears to be empty:

[email]()

Because I could not find a valid security contact address, I submitted the report through GitHub's private vulnerability reporting / security advisory flow instead.

Could you please confirm whether that is the preferred channel, or update SECURITY.md with the correct security contact email if email reports are preferred?

Thanks!

[mcfly-zzh]

Hi @ravitemer, just wanted to gently follow up here.

I submitted the security report through GitHub's private vulnerability reporting / security advisory flow because SECURITY.md does not currently include a valid contact email.

Could you please confirm whether GitHub private advisories are the preferred channel for this repository? If email is preferred, it would be helpful to update SECURITY.md with the correct security contact.

I am happy to clarify the private report or help verify a fix inside the advisory thread.