Security Reports Security reports can be made via Tidelift. Tidelift will coordinate the fix and disclosure.