Security: request a private disclosure channel for openapi-generator-online finding

[iabdullah215]

Hi maintainers,

I've identified a security issue in the openapi-generator-online component
and would like to report it responsibly.

I previously emailed team@openapitools.org about this on 11th July
but haven't received a reply, so I'm following up here to find the right
channel.

The repository does not currently have a SECURITY.md, and private
vulnerability reporting does not appear to be enabled under the Security tab,
so I don't have a private channel to send the details.

Could a maintainer either:

1. Enable GitHub private vulnerability reporting for this repo
   (Settings → Security → "Private vulnerability reporting"), or
2. Share a private contact I can send the full report to

I'm intentionally not including any technical details here to avoid public
disclosure before a fix. I have a working proof-of-concept and a suggested
fix ready to share privately.

Thanks — happy to follow whatever process you prefer.

[Chrimle]

Thanks for reaching out, I will forward this to our Slack channel!

Best regards,
Chris

[wing328]

i'll check your email and reply back shortly. thanks for contacting us about the potential security vulnerability.