I've created a private repository under Gogs to signal and handle security issues. All SAC members should have access. Please let me know if you cannot see it: https://git.osgeo.org/gogs/sac/system-security/issues Thanks. --strk;