To report a security vulnerability, please use Bugzilla, Mozilla's bug tracking software. It allows us to hide security problems from the public until they are resolved.