We thank security researchers who responsibly report vulnerabilities.

Valid reports receive public credit unless anonymity is requested.