Report suspected vulnerabilities privately to hi@eastsun.me. Include the HackDesk version, affected platform, and steps to reproduce.

Do not post vulnerabilities, API tokens, or private notes in public issues.