I recently identified a potential security issue in pvlib and reported it via email to the listed contact address.
I wanted to kindly follow up here to confirm whether the security contact is correct, or if there is a preferred private channel for responsible disclosure.
For security reasons, I have not included any technical details in this public issue. I would be happy to provide full details through a secure/private communication channel.
Thank you for your time and attention.