To report a security vulnerability, please follow these steps:

1. If you discover a security vulnerability, we'd appreciate a non-public disclosure.
2. Contact us via any developers from are Contributor Mailing List.
3. Provide a clear description of the issue and potential impact.
4. We will acknowledge your report within 48 hours and provide updates as we assess and address the issue.

For more details, visit the Security Wiki.