To report a potential vulnerability, please direct message a board member on Matrix or Discord, or open a draft Security Advisory at https://github.com/overte-org/overte/security/advisories.