# Reporting a vulnerability

**URL:** <https://forum.ghost.org/t/reporting-a-vulnerability/37552>\
**Category:** Developer help\
**Created:** [April 3, 2023, 5:26pm UTC](https://forum.ghost.org/t/reporting-a-vulnerability/37552 "2023-04-03T17:26:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ibarrionuevo](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/ibarrionuevo/32/23850_2.png) [@ibarrionuevo](https://forum.ghost.org/u/ibarrionuevo)\
**Post date:** [April 3, 2023, 5:26pm UTC](https://forum.ghost.org/t/reporting-a-vulnerability/37552/1 "2023-04-03T17:26:39Z")

</div>

Hi team,  
I just wanted to tell you that I have submitted a vulnerability through [https://huntr.dev](https://huntr.dev) some time ago, have you had a chance to take a look? [https://huntr.dev/bounties/3114e15d-6561-4301-954b-393b34757bbc/](https://huntr.dev/bounties/3114e15d-6561-4301-954b-393b34757bbc/)

I am available if any questions.  
Thanks!

---

<div class="post-metadata">

**Author:** ![RyanF](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/ryanf/32/17448_2.png) [@RyanF](https://forum.ghost.org/u/RyanF)\
**Post date:** [April 3, 2023, 6:20pm UTC](https://forum.ghost.org/t/reporting-a-vulnerability/37552/2 "2023-04-03T18:20:24Z")

</div>

Potential security vulnerabilities can be reported directly to us at `security@ghost.org` . The Ghost Security Team communicates privately and works in a secured, isolated repository for tracking, testing, and resolving security-related issues.

More details here: [Ghost Security & Privacy](https://ghost.org/docs/security/#responsible-disclosure)

---

<div class="post-metadata">

**Author:** ![ibarrionuevo](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/ibarrionuevo/32/23850_2.png) [@ibarrionuevo](https://forum.ghost.org/u/ibarrionuevo)\
**Post date:** [April 5, 2023, 10:21pm UTC](https://forum.ghost.org/t/reporting-a-vulnerability/37552/3 "2023-04-05T22:21:24Z")

</div>

Ok… so, huntr.dev is currently reporting our findings in that email address. Could you let me know if my finding is in that inbox, please? Thanks in advance!  
Ileana.
