Please DO NOT report security vulnerabilities using a public GitHub issue. If you believe you've found a security issue, please contact us through one of the following methods:
- Using GitHub security advisories:
https://github.com/saleor/<repository-name>/security/advisories(replace<repository-name>) - Alternatively, through our mailing list: security@saleor.io
We do not currently have a bounty program in place, so we cannot offer monetary rewards for any reported problems.
Whichever method you choose, you will be credited as the reporter once the announcement is published.