http://askdm7hr4obajor6nu7zldqesdzk7tsbhitwnn7qb3xsebr4l7fixqid.onion/docs/README.html
In these cases we have a policy of closing the bug, which may leave a very real problem in place. Obviously we would rather not have this situation arise. 5.i. Security related bugs If you find a potential security related vulnerability in phpBB please DO NOT post it to the bug tracker, public forums, etc.!