Create SECURITY.md

[JamieSlome]

Hello 👋

I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@w-henderson) has found a potential issue, which I would be eager to share with you.

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Looking forward to hearing from you 👍

(cc @huntr-helper)

[alamb]

Feel free to send to andrew@nerdnetworks.org

[JamieSlome]

@alamb - thanks 👍

I've opened up #546 to help you with a SECURITY.md. Just for reference, the report can also be found here:

https://huntr.dev/bounties/77186930-deff-421b-8678-5418ae8f85d9/

It is currently private and only accessible to maintainers with repository write permissions.

[alamb]

Thank you