Security: request to open a private disclosure channel #197

Hi, I'm a security researcher (mohammad adnan, CyStack red team). I found what I believe is a path-traversal issue in fastapi-admin (current release, in the file-upload storage path) and would like to report it privately.

I couldn't find a private channel: this repo's GitHub Private Vulnerability Reporting looks disabled (Security > Advisories > Report a vulnerability returns 404) and I didn't find a SECURITY.md contact. Could you either enable Private Vulnerability Reporting (Settings > Security > Private vulnerability reporting), or share a security email?

I have a runtime-verified proof-of-concept and a small fix ready to share privately. I'm not posting details here to avoid public exposure before a fix. Thanks.