Report suspected vulnerabilities in RHOBS Auth Gateway privately through the Red Hat Product Security contact form. Do not report them in public GitHub issues or discussions.

Include the affected version or commit, the impact, and steps to reproduce the issue. Remove credentials, tokens, and customer data from reports and logs.