See https://docs.camunda.org/security/ for our Security Guide and https://camunda.com/trust-center/reporting-vulnerabilities/ for how to report a vulnerability.