See our [SECURITY.txt](https://www.trailofbits.com/.well-known/security.txt) for our policy on vulnerability disclosures.