All Daytona-owned repositories are covered by Daytona's security policy: https://github.com/daytona/.github/blob/main/SECURITY.md

To report a vulnerability, use the "Report a vulnerability" button in this repository's Security tab, or email security@daytona.io. Please do not report security vulnerabilities through public GitHub issues.