Does the CVE email address work?

[Cyberbeni (Benedek Kozma)]

The security process on GitHub points to here. That site says

You’ll receive an email reply from Swift.org to acknowledge that we received your report, and we’ll contact you if we need more information.

I got no confirmation (or bounce) email. I've sent my report more than a month ago.

[tkremenek (Ted Kremenek)]

There is unfortunately a huge amount of spam that gets sent to that address. Thanks for following up here.

[Cyberbeni (Benedek Kozma)]

@tkremenek Cyberbeni/spm-cache-poisoning: Demonstration of Swift Package Manager cache poisoning - Codeberg.org