If you think you've identified a security issue in any ToS;DR Project, please do not report the issue publicly via a mailing list, IRC, a public issue on our issue trackers, a merge request, or any other public venue.