NARA Vulnerability Disclosure Report

NARA is committed to providing a secure environment to safeguard our mission to drive openness, cultivate public participation, and strengthen our nation’s democracy through public access to high-value Government records. NARA's Vulnerability Disclosure Policy gives security researchers guidelines for conducting vulnerability discovery activities and submitting vulnerability reports. We will use any information you submit under this policy for defensive purposes only -- to mitigate or remediate vulnerabilities.

If you prefer to remain anonymous, you may submit vulnerability disclosure information through this report (without filling in the contact fields).

When you submit a report, we encourage you to:

  • Describe the website location, date, and time the vulnerability was discovered and the potential impact of exploitation.
  • Describe the steps needed to reproduce the vulnerability.
  • Use English, if possible.
Describe the vulnerability.
Provide Your Contact Information? (Optional)
Top