If you have any questions or concerns relating to the security of Open edX code (including any potential vulnerability disclosures), please follow the guidance in the edX security policy. edX's security team will be happy to assist you.
In the future, the Open edX project will develop an independent security policy and process.