If you find a case where ValidRO accepts an invalid code or rejects a valid one in a way that could be abused, report it privately through Security → Report a vulnerability on the GitHub repository, rather than in a public issue.

Please include the type of identifier, a fictitious example that reproduces the problem, and the expected result. Do not send real personal data.

You will get a reply within 7 days.

Only the latest published version receives fixes.