Please contact:
[email protected]

We will be looking at each vulnerability reported on a case to case basis.
The vulnerabilities will also be reported to Adobe since it being the parent company for Magento.