Please do not report security vulnerabilities in public issues.

If GitHub private vulnerability reporting is enabled for Rally, use the "Report a vulnerability" option in the repository's Security tab.

If private reporting is unavailable, contact @ArmmyC privately through GitHub. Include only the information needed to reproduce the issue.

When reporting, describe the affected route or file, the impact, reproduction steps, and any suggested mitigation. Do not include credentials, tokens, personal data, or live exploit code.