Investigate and report possible security issues, and help solve them before users are affected. Please don't do this on Framasoft's infrastructure but through installing the projects yourself.
The Framasoft GitLab instance is hosted at framagit.org. You have to sign-up here, using your e-mail account or by way of a third-party token provider.
A quick search can yield similar bug and avoid opening duplicates. Take a minute or two to search our issue tracker or our forum for recent bug reports that could match yours, but don't worry if you open a duplicate: a contributor will handle it :)