Security vulnerability report – request for private disclosure channel

[rajinikanth-pandey]

Hello maintainers,

I have identified a potential security vulnerability in the Python validators library, confirmed in version 0.36.0.

The issue concerns inconsistent enforcement of the private=False URL-validation policy across different IP address representations. I have reproduced the behavior and verified its security impact in an isolated AWS Docker environment.

I would like to disclose the technical details, proof of concept, and recommended remediation privately, following coordinated vulnerability disclosure practices.

Could you please provide an appropriate private reporting channel or enable GitHub's private vulnerability reporting feature?

Thank you.