You should report any vulnerability to the project team as a GitHub issue or via email at opensource@nhsx.nhs.uk. The project team will review and investigate all reports, and will respond in a way that it deems appropriate to the circumstances.