If you think that you have found a security vulnerability in EJBCA, please report it to this email address: security@primekey.com

If you want to encrypt email traffic, first send a note to the above list requesting pgp credentials to use.