Security Policy Reporting a Vulnerability Instructions for reporting a vulnerability can be found on the crossplane repository.