Security Policy for reporting security vulnerabilities. See the security policy 2FC9 in the main project repository.