Report vulnerabilities through GitHub private reporting. Include the version or commit, compiler, OS, filesystem, reproducing code or commands and diagnostics. Attach a synthetic database if a file is needed to reproduce the issue.
File permissions, synchronization and recovery behavior are described in durability.