Security report - requesting private contact

[averonsec]

Hi,

I'm an independent security researcher (CVE credits on WordPress plugins, averonsec.com). I did a manual source review of v2rayN.WebAPI and found 4 confirmed vulnerabilities with full source-to-sink traces - including one that allows arbitrary file deletion on the host.

This repo doesn't have a SECURITY.md or private advisory channel set up, so I'd rather not post technical details here publicly. Could you share an email so I can send the full writeup?

Thanks,
Averon Averenkov
averonsec.com

[yfdyh000]

See the #10305 (reply in thread)