This page recognizes security researchers who have reported valid in-scope vulnerabilities under our Vulnerability Disclosure Policy, and who consented to public credit.

Pseudonym or real name, your choice. Disclosure date and the nature of the vulnerability are indicated (without exploitable details).

2026

First valid disclosure pending. If you are reading this and have identified a flaw, email us at security@flavie.me - you could be the first person listed here.

How to get credit

  1. Report a valid in-scope vulnerability under the disclosure policy.
  2. Confirm by email that you want to be credited, and provide your name or handle.
  3. Once the vulnerability is fixed and the disclosure is coordinated, your name appears here within the following week.

Thank you to everyone who contributes to the security of the service. Your reports directly protect Flavie's users.