How to report a security issue in an open source project - Jacob Kaplan-Moss
So you’ve found a security issue in an open source project – or maybe just a weird problem that you think might be a security problem. What should you do next?| jacobian.org
