...
The following describes how and when Y2 ENGINEERING SP ZO.O. (a provider of downloadable and cloud-based applications under the Release Management Apps (“Release Management”) brand name through the Atlassian Marketplace) resolve security bugs in our Apps. It does not describe the complete disclosure or advisory process that we follow.
...
Security issues should be sent either via our Service Desk Portal (https://releasemanagement.atlassian.net/servicedesk/customer/portal/11/group/16/create/80) or sent via support email (security@releasemanagement.app).
We will acknowledge the issue within 24 hours and advice on mitigation timelines or reject the request providing insideout inside out details.
Resolution timeframes are dependent on criticality and match the timelines outlined above.
...