In a way, even we value the security of our projects, as in Max itself. You can use Issues (https://github.com/NervousGroove/Max/issues) to report security problems as well.