Potential security issue

[psmoros]

Hello 👋

I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@dimasma0305) has found a potential issue, which I would be eager to share with you.

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Looking forward to hearing from you 👍

(cc @huntr-helper)

[jbr]

I'm a contributor to this project, but I'm not sure what our security policy is as it is not under active development. I don't know what versions are supported, or if any are. We haven't had even cut a patch release in years.

cc @yoshuawuyts @Fishrock123 @joshtriplett — I'm not sure who else is monitoring tide issues these days

All of that said, I'm willing to triage this particular issue. [email protected]