If the vulnerability results from code also present in upstream Space Station 14, please report it to them instead of us.

You can report a security vulnerability through Discord, by joining our server and then privately messaging anyone with the @maint role.

In either case, please do not publicly disclose the vulnerability until we explicitly give you permission to do so.