Please report security vulnerabilities in OperaLibre privately through GitHub security advisories. Do not open a public issue or pull request, and do not disclose the problem publicly until it has been investigated and a fix is available.

Include the affected version, your deployment mode, steps to reproduce, and the impact you observed. Only the latest release receives security fixes.

For hardening a server you run, see Deployment and Troubleshooting.