Security review

Hi there,

If I download the latest SVN version of WordPress (as per the bug hunt instructions) and do a code review on it, who do I report the problems to? The bugtracker, or someone specific?

Andrew