If you discover a security vulnerability in OpenEMR, there are two options for reporting the vulnerability to the OpenEMR Security Team.

• Option 1 (preferred) : Report the vulnerability at this link. See Privately reporting a security vulnerability for instruction on doing this.
• Option 2: Report the vulnerability by sending an email to the OpenEMR Security Team email at security@open-emr.org . If possible, please encrypt your email via PGP with this public key.