How do I report a security issue?

Email support with what you found and how to reproduce it; anything security-shaped goes to the front of the queue and gets acted on directly, we are the people who built it, not a triage layer. Please report privately rather than publicly so a fix can land first.