Where to report security issues?

[zefr0x]

I wasn't able to find any specific and official communication channel dedicated for reporting security issues. And didn't find any reference to such thing.

If there wasn't, can you please have a security reporting policy or open reporting security advisories in Github (from the Security tab), maintainers should be able to enable it.

P.S. Nothing critical, just low severity (but important of course)

[kasper93]

There is no process currently in place. You can send private message to one/all of the maintainers on IRC or over the email.