To report a security vulnerability in Islandora, please send an email to security@islandora.ca describing the issue.
The Security Team may follow up with private discussion in Slack to resolve the security issue. If you are a part of the Islandora Slack workspace, please include your Slack handle in your email.
Security updates and announcements are made via the main Islandora Google Group.