On Thu, 21 Apr 2022 20:46:12 +0200 Robert Großkopf <firstname.lastname@example.org> wrote:
Hi Min Di,I found a vulnerability and I want to know if I should send you the vulnerability report through the website or through a special bug bounty platform?I would prefer to write a bug description at https://bugs.documentfoundation.org/
Obviously it wouldn't be a good idea to expose an unpatched vulnerability on a public bug reporting site. If that is what is being reported? Details of vulnerabilities need to be reported through some private channel.