Reporting a bug
If you think you have found a bug, the best thing to do is to file a ticket on our code management forge:
https://git.spip.net/spip/spip/issues/
If you don’t have an account on this tool yet, you can register by filling the "Contribute to the development" form on this page:
https://contrib.spip.net/spip.php?page=identifiants
Reporting a security breach
To report a security vulnerability or a suspected vulnerability, do not do it publicly, neither in a ticket, nor in a forum: send an email to securite@spip.net.