---
id: security
title: Security Disclosures
---

The canonical security policy, including how to report a vulnerability, is in
the repository's [SECURITY.md](https://github.com/oauth2-proxy/oauth2-proxy/blob/master/SECURITY.md).