Currently, we are only providing security updates for the latest version of ThreatAtlas.

Please do not report security vulnerabilities through public GitHub issues.

We take the security of OWASP ThreatAtlas seriously. If you believe you have found a security vulnerability, please report it to the project leaders:

• Ali Yazdani: ali.yazdani@owasp.org

Please include the following in your report:

• Type of issue (e.g., buffer overflow, SQL injection, cross-site scripting)
• Path/location of the issue
• Potential impact
• Steps to reproduce

We will acknowledge receipt of your report within 48 hours and provide a timeline for remediation.