If you believe you have found a vulnerability in a KloudKIT project, please email info@kloud.email or open a private advisory from the repository's Security tab, with a clear description and a proof of concept (if applicable).

Please don't open a public issue for it. We'll confirm we got your report and keep you posted until it's fixed.

Kloud Workspace (the workspace and ws-* repositories) takes its reports as a private advisory in ws-meta, and its full disclosure process is on the Security Advisory page.