Submitting security-related bugs

Dear all,

is there a procedure for reporting security-related bugs in Xerces-J? I suspect that bugs reported through Jira are directly visible to everyone, so that this approach might not be suitable for security issues.

Thanks for helping!
Olaf