Please refer to the Bytecode Alliance security policy for details on how to report security issues, our disclosure policy, and how to receive notifications about security issues.
For classification of what is and what isn't a security issue please see our online documentation on the subject.