There are channels in place to discuss security matters in open source. I am by no mean an expert nor very interested in that topic, but just searching a bit le

There are channels in place to discuss security matters in open source. I am by no mean an expert nor very interested in that topic, but just searching a bit led me to https://oss-security.openwall.org/wiki/mailing-lists https://oss-security.openwall.org/wiki/mailing-lists The good guys are certainly monitoring these channels already.