security bugs

[Chris Weber]

I'm loving Roundcube, installation and configuration is a breeze, and the
interface is elegant.  I just installed it today and plan to get some good
use from it . I've also started poking at it to find any security issues I
can.  What's the preferred method for me to submit security bugs such as
XSS?
good stuff,
Chris