Currently, all versions of BORA will have a security policy. Heres what you should do incase you find something!
- Open a public issue on the GitHub as a bug
- Disclose how the bug affects the runtime and how it can get fixed (if you know how to do it)
That's all you have to do, once that's done. Leave it to the developers to fix it.