If you found a security issue, please contact us using the following email: glpi-security AT ow2.org

Please never use standard issues to report security problems; vulnerabilities are published once a fix release is available.

You should provide us all details about the issue and the way to reproduce it. You may also provide a script that can be used to check the issue exists.

Once the report will be handled, and if the issue is not yet fixed (or in progress) we'll add it to the GitHub security tab, and add you as observer. Meanwhile, you will reserve a CVE for the issue.