To report a security vulnerability please email [email protected] as explained at https://guides.dataverse.org/en/latest/installation/config.html#reporting-security-issues
Advice on securing your installation can be found at https://guides.dataverse.org/en/latest/installation/config.html#securing-your-installation
Security practices and procedures used by the Dataverse team are described at https://guides.dataverse.org/en/latest/developers/security.html