I've identified a potential vulnerability in the osTicket application. How do I report this bug discovery on osTicket?
tangsel1928
Security Policy has been live for years on our repo:
Rule of thumb, when dealing with open-source projects go to their source code repository and check if there are any security policies. If not, then reach out directly, not on a public platform like this.
Cheers.