https://dev.tiki.org/tracker15 had a notification to the security team email group but there are too many bounces so I removed for now.
Permalink: https://tiki.org/blogpost929-Removal-of-emails-from-the-security-issue-bug-tracker-to-the-security-team-email-group