Security fixes are applied to the current DocFerry Community release and the hosted service at https://docferry.bondie.io.

Report vulnerabilities to support@bondie.io with the subject DocFerry security report. Do not open a public issue for an unpatched vulnerability or include tokens, cookies, card data, private Share content, or another user's personal data in the first message.

Include the affected version, expected and observed behavior, minimal steps using non-sensitive data, and the potential impact.