We publish a security policy at https://docs.peeringdb.com/howto/make-a-security-report/ on our documentation site. It describes how to responsibly report security vulnerabilities to us. It also describes how we will respond and what is not in scope.