&gt; Here&#x27;s their &#x27;Records of security issues&#x27; page: <a href="https:&#x2F;&#x2F;seacloud.cc&#x2F;group&#x2F;3&#x2F;wiki&#x2F;security-records&#x2F;" rel="nofollow">https:&#x2F;&#x2F;seacloud.cc&#x2F;group&#x2F;3&#x2F;wiki&#x2F;security-records&#x2F;</a><p>Just take a look who reported their recent issue allowing a lot of attack vectors. (more than they mentioned though) :)<p>Actually if somebody had a local user account themselves they could bruteforce the secret key in seconds. And SeaFile has additionally modified the default Django components making it more insecure: <a href="https:&#x2F;&#x2F;github.com&#x2F;haiwen&#x2F;seahub&#x2F;commit&#x2F;7cdb70368aa7acbf05461e22e83278b00c2036c8" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;haiwen&#x2F;seahub&#x2F;commit&#x2F;7cdb70368aa7acbf0546...</a><p>By the way, ownCloud does run a Bug Bounty: <a href="https:&#x2F;&#x2F;hackerone.com&#x2F;owncloud" rel="nofollow">https:&#x2F;&#x2F;hackerone.com&#x2F;owncloud</a>