Hepp! I have a security related finding, which isn't a bug as such. The CONTRIBUTING.md says to not report this as issues anymore, but use slack. Who? Where? What? should I do?

maybe post in #C08VA3XQU

Thanks. I got feedback in a private channel.