Where should I report a PyMuPDF security issue?

[uko3211]

Where can I submit a report about a PyMuPDF security issue? There doesn’t seem to be any related notice in the security tab.

[JorjMcKie]

Just like an uncategorized issue. Mention something in the title.

[uko3211]

@JorjMcKie
This is an undisclosed 0-day vulnerability, so it should be handled privately. I don't think it should be reported as a public issue. Please enable GitHub’s repository security advisories via the Security tab so we can use the advisory workflow:
https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/creating-a-repository-security-advisory

[JorjMcKie]

Please send an email describing the problem to support@artifex.com.

We will then determine which product is affected (may not be PyMuPDF itself) and act accordingly.