If you discover a security vulnerability within Mago, please send an e-mail to our Security Team via security@carthage.software.
Please withhold public disclosure until after we have addressed the vulnerability.
There are no hard and fast rules to determine if a bug is worth reporting as a security issue.