Security issues and bugs should be reported privately via email to opensource@pathogenstudios.com. You should expect a response within a week.

Please do not open issues for anything you think might have a security implication.