If you discover a security vulnerability, please report it through GitLab work items and make sure to tick the Turn on confidentiality: Limit visibility to project members with at least the Planner role. checkbox.