Security Issue: Request for contact

[pwntester]

Hello,

The GitHub Security Lab team has found a potential vulnerability in your project. Please create a Security Advisory and invite me in to further disclose and discuss the vulnerability details and potential fix. Alternatively, please add a Security Policy containing a security email address to send the details to.

Kind regards,
A

[ariabuckles]

Hi @pwntester !

Thank you so much for contacting me! Sorry about the late response; I've been struggling a lot during the pandemic.

I'd love to hear the details about this at [email protected] , and added a security policy.

(I don't have admin rights to make security advisories on the repo as I no longer work at Khan Academy, but I continue to be the maintainer for this project)

[pwntester]

Thanks, just sent you the report

[ariabuckles]

Fixed in #95 / version 0.7.3

Thanks again @pwntester !