Use the REDUCE Bug Reporting and Ticketing System at Sourceforge to report any security vulnerabilities.
Please choose the "Mark as Private" when submitting your report.