The Security Policy for the software and/or documentation in this repository is equal to the Security Policy of Firefly III itself.
If you know of a publicly disclosed security vulnerability for Firefly III, please IMMEDIATELY contact james@firefly-iii.org to inform the Firefly III developer. You can use the GPG key for extra security.