Report: I am wondering if someone discovers a bug/exploit in Bitcoin software or protocol, who should it be disclosed to?

You are reporting the paste I am wondering if someone discovers a bug/exploit in Bitcoin software or protocol, who should it be disclosed to?.