As part of our support for the OpenSSL Mission we also support the OpenSSL security policy, applied for cryptlib. To report a vulnerability for cryptlib, use the "Report a Vulnerability" button in the Security section.