Specifically, for the core auth-server binary:

We take the security of Auth Server seriously. If you believe you have found a security vulnerability, please report it to us as described below..

Please include:

• The project name and version
• A description of the vulnerability
• Steps to reproduce the issue
• Any potential impact

We will:

• Acknowledge receipt of your report within 48 hours.
• Provide a timeline for addressing the issue.
• Notify you once the issue has been resolved.