Vulnerability Disclosure Process?

[IMCraig]

Could someone please advise how I can appropriately share security sensitive bug information with the maintainers of ImageMagick? (i.e. I would like to submit a file which is not handled safely by the magick.)

Thanks!

[magick]

E-mail to security at imagemagick dot org.