Responsible Disclosure

Report suspected vulnerabilities to the security contact listed in your enterprise agreement or deployment runbook. Include affected URLs, impact, reproduction steps, and whether any data was accessed.

Only test systems you own or are authorized to assess. Do not access, modify, delete, or exfiltrate data that is not yours.