No login required. Your email is optional but lets us ask follow-ups and credit you.
This form is covered by our security.txt (RFC 9116). We aim to acknowledge reports within 48 hours. Please don’t publicly disclose the issue before we’ve had a chance to fix it.