# Security

Report a vulnerability in private by email to security@mordaunt.dev.
Do not open a public issue or pull request for it.

## Scope

In scope are the `leita` and `Leita` binaries, the leita-journal service
(it runs as root), and the report formats (PDF, HTML, CSV and JSON).

## Response

Expect a reply within 7 days. There is no bounty.