SECURITY.md contact is unreachable — request for private vulnerability disclosure channel

[yii-llc]

Hi restify maintainers,

I am trying to privately report a security vulnerability affecting restify / node-restify.

I followed the SECURITY.md instructions and attempted to contact security@restify.com, but the message was not delivered. The remote mail server returned:

554 5.7.1 Relay access denied

I also contacted prior maintainers and was advised to reach out to the current maintainers.

I do not want to disclose any technical vulnerability details publicly.

Could you please confirm the correct private security reporting channel, or enable GitHub Private Vulnerability Reporting for this repository?

cc @DonutEspresso @wesleytodd

Thanks,
Nir Yehoshua
Cipher Security Labs

[wesleytodd]

@yii-llc please email either of our public emails from our GH accounts with the details.