The DHIS2 security team participates in responsible disclosure and welcomes collaboration with the wider community on security issues.

To report a security issue, use the affected repository's Security tab and click "Report a vulnerability" (GitHub private vulnerability reporting). If that repository does not have private reporting enabled, or the issue is not specific to a single repository, email security@dhis2.org with a description of the issue, the steps to reproduce it, affected versions, and, if known, mitigations.

Please read our Vulnerability Reporting & Disclosure Policy before submitting a security issue, as some classes of vulnerabilities are explicitly out of scope.

Learn more about DHIS2 security features at dhis2.org/security.

Learn more about DHIS2 security policies and practices at dhis2.org/trust.

Contact: mailto:security@dhis2.org
Preferred-Languages: en
Policy: https://dhis2.org/trust/vulnerability-policy