If you find a security problem in this repository or the Foundation0 site (for example a way to run code on the site, to publish through its workflows, or to reach a private space), please report it privately, not in an issue or the forum:

• Preferred: the repository's Security tab → Report a vulnerability, which reaches the repository's admins only.
• If that form is not available: open an issue that says only that you have a security report and how to reach you, with no details. An admin will contact you.

We will say when we have read the report, fix what we can, and credit you in the fix if you want to be credited. Once a problem is fixed, the report and the fix are published, so the history stays public (charter principle 0.6).