All Daytona-owned repositories are covered by Daytona's security policy: https://github.com/daytona/.github/blob/main/SECURITY.md

To report a vulnerability, email security@daytona.io, or use the "Report a vulnerability" button in the Security tab of the affected repository in the daytona organization. Please do not report security vulnerabilities through public GitHub issues.