If you’ve found a vulnerability in Semgrep, our web application, or broader infrastructure, please email security@semgrep.com and we’ll respond promptly. We appreciate your contribution and take all submissions seriously.