Zendesk takes security of our software products and services seriously, which includes all source code repositories.
Reporting Security Vulnerabilities
Please report security vulnerabilities to Zendesk Security Team at security@zendesk.com. If you are reporting vulnerabilities for bug bounty, use the Zendesk HackerOne program: https://hackerone.com/zendesk?type=team.