If you have found an issue in an Play Framework project or any of the projects within the Play Framework GitHub organization that might have security implications, you can report it to security@playframework.com. We will make sure those will get handled with priority. Thank you for your responsible disclosure!