Please provide a contact for disclosing memory safety issues

[Shnatsel]

I have uncovered some API soundness issues in rav1e and related crates. This repository has no security policy; please advise on how these issues should be reported.

Should I report them as public issues, or would you like them to be reported privately? If so, where?

[lu-zero]

If you report them with a propose patch would be great.

[Shnatsel]

Thank you. I'm still working my way through triaging the impact of my findings for rav1e; I've opened a PR to fix some soundness issues in a related crate: rust-av/v_frame#74