Do not report security issues on meta; contact Stack Exchange directly instead. For more information, see "How do I report a possible security vulnerability?" in the Help Center.
If I found a serious security issue (e.g. which makes it possible to use spam bots, sign in with fake OpenIDs etc...), what should I do?
- Add a bug report on meta (which makes it possible for everyone to abuse it if they know the issue exists :-) )
- Contact the Stack Overflow team (Jeff Atwood etc...)
- Something different?
Oh, I don't say I found one, but, well, just in case...