Security: Preferred contact for a private security report

[dngen]

Hello,

I have a security report concerning basic-http-server that I would like to share privately before any public discussion. I did not find a SECURITY.md file, and GitHub private vulnerability reporting does not currently appear to be enabled for this repository.

Could you enable GitHub private vulnerability reporting or let me know your preferred private contact method? I will keep the technical details out of this public issue.

Thanks.