If you’ve found a vulnerability in Semgrep, our web application, or broader infrastructure, please email [email protected] and we’ll respond promptly. We appreciate your contribution and take all submissions seriously.