Hypha

What to include

• A description of the issue and its potential impact.
• Steps to reproduce it, or a proof of concept.
• The affected URL, repository, or system.
• How we can reach you if we have questions.

What to expect

We'll read every report and get back to you. We ask that you keep the details private until we've had a chance to fix the issue.

Acting in good faith

Please avoid accessing or changing data that isn't yours, disrupting our services or the people who use them, and social engineering our team or partners.

Our open source work

Much of our work is open source and lives on GitHub. Please use the same email address to report vulnerabilities in any of it, rather than opening a public issue. For how we handle data more generally, see How We Use Data in our handbook.