Since this is a public repository a security vulnerability should be reported via the following channel.

• Repository advisories page

Alternatively email or IRC (www.irc.perl.org || ircs://ssl.ircs.perl.org:7062/).