Hello board, Jody pointed me at this thread: http://sourceforge.net/p/geoserver/mailman/message/32319902/ and we both wondered if it would make sense to have this be part of the incubation checklist, i.e. what policy do you have in place for treating security issues? Best regards, Bart