If you have security concerns or a disclosure to make, you may contact the security team via security@raspberrypi.com
Please note that we do not offer a bug bounty programme.