For security-sensitive issues, the standard issue tracker in Pagure is being used. If reporting security bugs, please mark the Private checkbox.