We have a responsible vulnerability disclosure program to make our products more secure.
If you aren't sure whether an issue is eligible, send it to us and we'll check it out.
If we decide the bug is impactful or has a high-quality report, we may give a monetary reward.