This page lists security researchers who have responsibly disclosed vulnerabilities to GABLVM. We are grateful to the people who help keep our infrastructure and our users safe.
How to report
If you believe you have found a security vulnerability affecting gablvm.org or our supporting infrastructure (api.gablvm.org, support.gablvm.org, status.gablvm.org), please review our security policy and email [email protected] with the details. We acknowledge receipt within five business days and provide a status update within fourteen days.
Acknowledgments
We have not yet received any external disclosures. When researchers report security issues, we will list their names here, with their permission, after the issue has been resolved and disclosed.
Out of scope
Spam reports, automated scanner output without analysis, accessibility issues (please use [email protected] for those), and attacks against third-party services we depend on (Cloudflare, Quran Foundation, etc.) which should be reported directly to those vendors.