Where to report security vulnerabilities?

I cannot find any place to report security vulnerabilities… I have several issues to report, so I’d love to know where I can report issues in a non-public manner.

Hi,

Email matt@ and gato@ jivesoftware.com security @ igniterealtime dot org

daryl