Guest Manager

Security acknowledgments

Effective date: Aug 2, 2026

We’re grateful to the security researchers who report vulnerabilities responsibly and work with us to keep Guest Manager and our customers safe. With their permission, we recognize them here.

2026

  • Jaejun Cho
    • GM-VDP-2026-001 — Cross-tenant object access
    • GM-VDP-2026-002 — Cross-tenant object access
    • GM-VDP-2026-003
    • GM-VDP-2026-004 — Stored cross-site scripting
    • GM-VDP-2026-005 — Sensitive value in analytics telemetry

To report a vulnerability, see our responsible disclosure policy.

Adapted from the Basecamp open-source policies / CC BY 4.0
Questions or concerns about our policies? Don't hesitiate to get in touch.