If you discover a security vulnerability in OpenEMR, then report the vulnerability to the OpenEMR security group email at security@open-emr.org . If possible, please encrypt your email via PGP with this public key.