Is there a way we can responsibly disclose a security report?

cc @HughWilliams
Security report
This is a GitHub Issue
repo:virtuoso-opensource
owner:openlink
Title : Security report
Issue date:

--- start body ---
Is there a way we can responsibly disclose a security report?

cc @HughWilliams
--- end body ---
