To report a security issue, please use bugs portal.

The Zoho Security Team will respond within 5 working days of your report on bugs portal.

We use bugs portal for our intake, and do coordination and disclosure here using GitHub Security Advisory to privately discuss and fix the issue.