Please report security issues privately, never in a public issue or pull request.
Email support@coderhelm.com with "Security report" in the subject. Tell us what you found and how to reproduce it, and please give us time to fix it before you share it.
While you look, don't test against other people's accounts or installs, and don't send real email or load.
Security says how CoderHelm protects your code, your accounts and your people, on CoderHelm cloud, in hybrid mode and in your own AWS account.