I you find a vulnerability in the software, please send an email to opensource@paris.fr. If the community finds it consistent, it will do its best, along with the internal development team to fix it as soon as possible.