Where to write
Send security reports to [email protected]. It reaches the people who can fix things, directly.
What to include
What you found, where you found it, and the steps to reproduce it. The more precise the report, the faster the fix.
How we handle it
Reports are taken seriously, real issues get fixed, and finders are publicly credited with their permission.