Apache Polaris follows the process from ASF security team.
Please report any security issues to security@apache.org.