Post #1605217

What are best practices for situations where one has reason to suspect there is a security vulnerability in a project, but cannot confirm it? Especially when there have been similar vulnerabilities in the past, and one is about to file public issues that will tell others exactly where to look.