If you believe you have found a security vulnerability in MyCompany, please do not open a public issue.
Report it privately by e-mailing info@lsfusion.org. Please include the version you are running, a description of the problem, steps to reproduce it and, if possible, an assessment of the impact. We will respond as quickly as we can and coordinate a fix and disclosure with you.
Security fixes are normally provided for the latest stable release; if you run an older version, the recommended path is upgrading first.
MyCompany is self-hosted software: keeping your installation — including the lsFusion platform, Java and PostgreSQL underneath it — up to date is an important part of staying secure.