Investigate and report possible security issues, and help solve them before users are affected. Please don't do this on Framasoft's infrastructure but through installing the projects yourself.
The Framasoft GitLab instance is hosted at framagit.org. You have to sign-up here, using your e-mail account or by way of a third-party token provider.