Security
Report a vulnerability in private
This site does not publish a monitored security email address. Do not send exploit details to the ordinary contact form, and do not put them in a public issue.
A security report is stored apart from ordinary problem reports, and only when private local intake is turned on. It is not listed on the website.
Chalice Systems reviews it and keeps the details off public pages.
The ordinary report form is for faults that are not vulnerabilities.