Where to report a significant security breach?

I have encountered what I believe to be a significant security breach that could expose user details, how and to whom can I report it?

Hey champ and welcome to the forum!

You can report that over here:


Would you know if this security issue is fixed now. Also, if possible please share a work around to put any temporary fix

A bug report is unlikely to be “verified fixed” four hours later.

Also, to be eligible for a bounty, the discoverer must follow responsible disclosure practices — like not saying what it is.