Finding and reporting a security vulnerability
Atlassian's channel for reporting security issues is detailed in How to Report a Security Issue.
Publication of security advisories
Atlassian's approach to publishing security advisories is detailed in Security Advisory Publishing Policy.
Atlassian's scale for measuring security issues is detailed in Severity Levels for Security Issues.
Our patch policy
Atlassian's approach to releasing patches is detailed in our Security Patch Policy.