Send confidential vulnerability reports to security@diamaneos.de. Include the affected component, steps to reproduce the problem and its security impact.

Encrypt sensitive details with the OpenPGP public key. Check the primary fingerprint against the security reporting instructions before sending.

4AB9 1DBA 4726 2048 497B A046 A6D9 A7C6 48A6 884E

The signed security.txt also identifies the reporting address and public key URL.

Use the issue tracker for bugs that do not require confidentiality.