Found a possible security concern

[psmoros]

Hello 👋

I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@iskindar) has found a potential issue, which I would be eager to share with you.

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Looking forward to hearing from you 👍

(cc @huntr-helper)

[rkta]

On Thu, Jun 22, 2023 at 01:27:42AM -0700, Pavlos wrote: Hello 👋 I run a security community that finds and fixes vulnerabilities in OSS. A researcher ***@***.***) has found a potential issue, which I would be eager to share with you. Could you add a `SECURITY.md` file with an e-mail address for me to send further details to? GitHub [recommends](https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository) a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Hi, as this is basically Debian's w3m you could report it to Debian's security team. tats is also the Debian maintainer for w3m. Or email him directly.

[iskindar]

Thank you for your suggestion. I will take your advice and report the issue to Debian's security team regarding the w3m problem. 😊