No response to security vulnerability report submitted to GitHub Security

[Chenpinji]

I’m opening this issue because I reported a security vulnerability via GitHub Security, but I have not received any acknowledgement or review feedback so far.

I understand that triaging may take some time, but it has been over a month, and there has been no confirmation of receipt or status update regarding my report.

Could you please confirm:

1. Whether the report was successfully received and under review?

2. If additional information is needed from my side?

3. The expected timeline for triage or follow-up?

[WuSiYu]

Apologies for the delay; we hadn't noticed the relevant notification on GitHub Security earlier.
We now have leaved a comment in the GitHub Security.