If you discover a security vulnerability in OpenEMR, then report the vulnerability to the OpenEMR security group email at [email protected] . If possible, please encrypt your email via PGP with this public key.