If you've found a security issue that you'd like to disclose confidentially please contact Red Hat's Product Security team. Details at https://access.redhat.com/security/team/contact
Most repositories are licensed under the Apache License, Version 2.0. Some components may be licensed differently - consult individual repositories for more.