Please do not report suspected vulnerabilities via public GitHub issues.
Preferred channel:
Fallback:
- Email culm@culm.at
Please include steps to reproduce, affected versions, and any proof-of-concept material.
- Response within 5 business days
- Business hours: Mon–Fri, 09:00–17:00 CET
In scope:
- The Forge app source in this repository (
information-classification)
Out of scope:
- The Atlassian Forge platform and Confluence itself — report those to Atlassian
- Third-party services — the app makes no outbound network calls and has no external dependencies at runtime
Only the version currently published on the Atlassian Marketplace is supported. Fixes are not back-ported to older versions.
The full security, privacy, and compliance posture is documented in the Trust Center.