Back to project picker

Contact the security team

Not about one project

Use this if you are disputing a CVE and don't know which project it belongs to, or if your request is about Postiz rather than any one project under it. It goes to the same people, who will route it once they have read it.

What you file is not publicly visible.

Gelhaus Solutions runs this service and stores your report and account details. Maintainers can use AI assistance on what you submit (Google Gemini through OpenRouter, on a paid plan that does not train on it). Details are in the privacy notice.

What would you like to do?

Disputes are handled under the CVE Program's CVE Record Dispute Policy.