If you have found an issue that causes a vulnerability and should be reported without making it public, you can contact Juho Teperi over email or Clojurians Slack.