Security

Found a vulnerability?

Report it privately. We will investigate, prepare a fix and coordinate disclosure when appropriate.

02

Include reproduction details

Provide the Connect version, platform, reproduction steps, expected and actual behavior, and a minimal proof of concept when useful.

03

Do not access other people’s data

Do not access data that is not yours, disrupt the service, or extend testing beyond what is needed to confirm the issue.

04

Allow time for a fix

Please do not publish technical details before coordinated disclosure. The standard security contact is also available through security.txt.