Please do not open a public issue for a security problem.
Report it privately through GitHub: Security → Report a vulnerability on this repository (GitHub private vulnerability reporting). Include what is affected, how to reproduce it, and the impact you expect.
We acknowledge reports as soon as possible and keep you informed until the issue is fixed.
All code in this repository and the services it deploys (*.idem.africa).
The rules every change must follow are in docs/SECURITY.md.