tidegate controls access to infrastructure, so a vulnerability in it can give an attacker access to everything behind it. Please report vulnerabilities privately and don't open a public issue.
Report it through GitHub's private vulnerability reporting. If you don't have a GitHub account, send an email to karolin@giantswarm.io.
Describe the problem, the affected version and the steps to reproduce it. We respond as soon as we can.
Until 1.0, only the latest release gets security fixes.
Once a fix is released, we publish the vulnerability as a GitHub security advisory.
Both are maintainers, listed in MAINTAINERS.md.