Security Issue Reporting

[larsenpeter-msft]

Hi, I've identified a potential security issue in json.h related to JSON5/NaN parsing. Is there a preferred channel for reporting security vulnerabilities (email, private advisory, etc.)?