throwaway78246·4 năm trước·discussMy guess is that GitHub ignores issues so they don't have to pay out bug bounties.
throwaway78246·4 năm trước·discussIt was also my experience that it takes GitHub several months to fix issues and inform compromised users.