Report privately
Send security reports to security@d1reimagined.com. Describe the affected page or repository component, the behaviour and safe steps to reproduce it. Please do not open public issues for unpatched vulnerabilities.
Keep testing contained
Do not access other people’s data, disrupt services or publish credentials. If you encounter sensitive information, stop testing and report the issue privately.
Reports will be investigated, but the project does not offer a paid bug bounty.