Security contact for soulteary/otterio: an advisory is waiting in this repo's queue

[orenyomtov]

Not an apt-proxy bug. I am posting here because the advisory is already in this repo and you are active here.

On 2026-09-09 I emailed a security report about otterio to soulteary@gmail.com with the [otterio-security] subject prefix your SECURITY.md asks for. On 2026-09-16 I filed GHSA-6pjh-26xx-8pq3 in this repo's advisory queue asking you to name a channel you read. Both are still unanswered, and otterio's SECURITY.md promises an acknowledgement within five business days.

No details here, wrong repo and wrong venue for them. Either works:

• open https://github.com/soulteary/apt-proxy/security/advisories/GHSA-6pjh-26xx-8pq3 and reply there, or
• turn on private vulnerability reporting for soulteary/otterio (Settings, Security, Private vulnerability reporting) and I will refile the full report there.