Security fixes are released for the latest GradeShelf version only. Update to the latest release before reporting.

Please do not open a public issue for security problems.

Report them privately through GitHub security advisories. Include the affected version, how the instance is set up and the steps to reproduce. Remove secrets, session cookies and personal data from logs and screenshots.

You will get a reply as soon as possible. GradeShelf is maintained by one person in their spare time, so please allow a few days. Fixes are published as a new release and credited in the advisory unless you prefer otherwise.