To report a security vulnerability, please send a detailed disclosure to [email protected]. This is a confidential mailing list, and the TAC chair and a small group of trusted individuals will review and act upon the report as appropriate.