This project is supported by Archodex, Inc. only when used as part of an official Archodex Agent release. For all other security concerns, please contact the upstream elftoolchain project.
Please open a security advisory against the Archodex Agent here: https://github.com/Archodex/archodex-agent/security/advisories/new.
Once you’ve submitted an issue you should receive an acknowledgment from a member of the security team within 3 working days. After that, the security team will begin their analysis. Depending on the action to be taken, you may receive followup correspondence via the GitHub security advisory. It can take several weeks before the security team comes to a conclusion. There is no need to chase the security team unless you discover new, relevant information. All reports aim to be resolved within the industry-standard 90 days. Confirmed vulnerabilities with a high severity level will be addressed promptly.