Isaac Dawson

panic in matches index

2

There is a panic when comparing the window runes with the matches slice if the strings.Index call returns an index greater than the number of matches. ```go idx := strings.Index(string(slider),...

Fix zipslip for jar

1

Suggested fix for zipslip when handling jars directly. I didn't check any other locations for similar issues. Also the directory handling seems a bit suspect on lines 135~137 in ContextUnit.java.

Security issue, no way to notify privately

4

## Vineflower version Hello I'd like to report an issue & patch but it doesn't look like your team has [configured private vulnerability reporting](https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository). Let me know how best to...