Security Policy or security contact

[Nereuxofficial]

While fuzzing the broker i discovered a potential security issue in the broker. Is there any Security policy or security contact i can contact for this? Or do the maintainers prefer a public issue?