You can discuss it on the forum but please remember to submit it to Trac (http://trac.donmai.us) as well. The forum moves too fast for me to scan every thread for bug reports.
I found a security vulnerability a while back that's serious enough that I'd rather not report it publicly. Is there some way in Trac to mark a ticket so only you can see it? Or should I just PM you about this?
Do both. Create a ticket with some vague specifics and send me a PM.
Although honestly you can just dump everything in the Trac ticket. Unless it's a deeply ingrained problem I can fix it in a few hours of you posting it.
