Security Bug Reporting

When you discover a vulnerability or problem, it is essential to handle it responsibly. It is crucial to refrain from taking advantage of the situation by downloading excessive data to demonstrate the vulnerability or modifying other people's data. It is also important not to disclose the issue to others until it has been resolved.

Please report your findings and be aware of and follow this responsible disclosure policy:

• Avoid exploiting any vulnerability or issue that you have discovered. This includes refraining from downloading more data than necessary to demonstrate the vulnerability or deleting/modifying others' data.
• Do not disclose the problem to anyone until it has been adequately resolved.
• Do not use any physical security attacks, social engineering tactics, distributed denial of service attacks, spamming, or third-party applications to exploit the vulnerability or issue.
• Provide sufficient information to reproduce the problem so that it can be resolved as quickly as possible. This may include the IP address or URL of the affected system and a description of the vulnerability. Complex vulnerabilities may require additional explanation.

What we Promise:

• We will respond to your report within three business days, providing our assessment and an expected date for resolution.
• If you have followed our reporting instructions, rest assured that we will not take any legal action against you in connection with the issue.
• Your report will be handled with the utmost confidentiality, and we will not disclose your personal details to third parties without your express consent.
• We will keep you informed of progress made towards resolving the problem.
• In any public information regarding the issue, we will credit you as the discoverer of the problem, unless you specify otherwise.
• Our team is dedicated to resolving issues as quickly as possible, and we are keen to take an active role in publishing information about the problem once it has been resolved.