Security contact for reproducible memory-safety issue in hosts-file parsing

[damseleng]

Hello,

I have identified a reproducible memory-safety issue in wahern/dns, reachable through the hosts-file parsing path when processing a malformed local hosts-format input file.

I would prefer not to disclose the PoC file or detailed crash information publicly before the maintainer has had a chance to review it.

Is there a preferred private security contact, email address, or disclosure route for this project?

I can provide:

• minimized reproducer input
• ASan/UBSan crash log
• affected commit information
• clean-checkout reproduction steps
• source-level root cause notes
• suggested fix direction

Best regards,
Yukimura