Submitting security-related bugs

[Kummer, Olaf]

Dear all,

is there a procedure for reporting security-related bugs in Xerces-J? I suspect 
that bugs reported through Jira are directly visible to everyone, so that this 
approach might not be suitable for security issues.

Thanks for helping!
Olaf