Report privately to Julien BELLOT EI via https://relaisdesk.fr/contact.html, which also lists the direct email address. Do not publish credentials, private keys, customer data, or live exploitation details in public issues.

Provide the affected hbbs/hbbr version and commit, deployment mode, a minimal reproduction with synthetic data, likely impact, and any evidence of active exploitation. RelaisDesk coordinates relevant fixes with RustDesk upstream.

The maintainer assesses actively exploited vulnerabilities and severe incidents for applicable Cyber Resilience Act reporting, and personal-data breaches separately under the GDPR. No security certification is claimed.