Report Hub, agent, or image vulnerabilities privately via the application repo — not a public issue.

For this documentation site, use docs security advisories.