# Where to report security vulnerabilities? **URL:** \ **Category:** Ask us anything\ **Tags:** security\ **Created:** [July 19, 2024, 8:31pm UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840 "2024-07-19T20:31:50Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Houssam](https://avatars.discourse-cdn.com/v4/letter/h/b782af/32.png) [@Houssam](https://community.weweb.io/u/Houssam)\ **Post date:** [July 19, 2024, 8:31pm UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840/1 "2024-07-19T20:31:50Z")
Hello WeWeb community, I have identified pretty serious security vulnerabilities affecting WeWeb while working with it. Tried searching if WeWeb had a VDP (Vulnerability Disclosure Program) but didn’t find any. So, for the past month, I have tried reaching the WeWeb team in order to disclose said vulnerabilities, but with no success. All of my emails to the contact email address and some of the team members went unanswered. I am posting this here hoping that someone from the team sees it. Have a nice evening ! ---
**Author:** ![luka](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/luka/32/1571_2.png) [@luka](https://community.weweb.io/u/luka)\ **Post date:** [July 20, 2024, 8:28am UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840/2 "2024-07-20T08:28:14Z")
Report them as a bug [here](https://tickets.weweb.io/create_a_ticket/). We take security issues seriously so the emails you sent might have not been seen. ---
**Author:** ![Houssam](https://avatars.discourse-cdn.com/v4/letter/h/b782af/32.png) [@Houssam](https://community.weweb.io/u/Houssam)\ **Post date:** [July 20, 2024, 10:30am UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840/3 "2024-07-20T10:30:27Z")
Hey Luka, Yeah, I figured as much. E-mails tend to get lost in inboxes, that’s why I decided to post on discourse. I created a ticket on the support portal with the details of the findings, thanks for the reply. Have a nice week-end ! ---
**Author:** ![Houssam](https://avatars.discourse-cdn.com/v4/letter/h/b782af/32.png) [@Houssam](https://community.weweb.io/u/Houssam)\ **Post date:** [October 15, 2024, 6:31am UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840/4 "2024-10-15T06:31:15Z")
Hello @luka, I’ve seen that the team has been able to fix the vulnerabilities I reported, good work ! Now that the vulnerabilities have been fixed, I’m planning on writing a post detailing the findings on our company’s blog and as such wanted to check if WeWeb’s okay with publishing it unredacted. If not, that’s okay as I can redact the blog post before publishing. Thanks a lot in advance and have a good day ! ---
**Author:** ![Paul27](https://avatars.discourse-cdn.com/v4/letter/p/ac91a4/32.png) [@Paul27](https://community.weweb.io/u/Paul27)\ **Post date:** [October 15, 2024, 7:13am UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840/5 "2024-10-15T07:13:55Z")
That would be an interesting read. ---
**Author:** ![Broberto](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/broberto/32/5918_2.png) [@Broberto](https://community.weweb.io/u/Broberto)\ **Post date:** [October 15, 2024, 8:20am UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840/6 "2024-10-15T08:20:12Z")
Definitely would be interesting to see, but I think we’ll never know 😃 ---
**Author:** ![Houssam](https://avatars.discourse-cdn.com/v4/letter/h/b782af/32.png) [@Houssam](https://community.weweb.io/u/Houssam)\ **Post date:** [October 15, 2024, 12:13pm UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840/7 "2024-10-15T12:13:37Z")
Just have to wait on WeWeb’s answer then 😀 The findings individually are nothing to write home about, but the chain and final impact is pretty cool though 😛 ---
**Author:** ![Profound5753](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/profound5753/32/6870_2.png) [@Profound5753](https://community.weweb.io/u/Profound5753)\ **Post date:** [October 16, 2024, 12:53am UTC](https://community.weweb.io/t/where-to-report-security-vulnerabilities/9840/8 "2024-10-16T00:53:11Z")
I’m curious for curiousity sake. 🙂