Please email security reports to hello@hyperskill.org or reach out to maintainers directly at ivan.magda@hyperskill.org. Please do not create issues or public conversations for discovered security issues until a patch is shipped.