If you've found a security vulnerability in Upright, please report it responsibly. Do not open a public issue.
Instead, email security@37signals.com with details of the vulnerability.
We will acknowledge your report within 3 business days and aim to release a fix promptly.