If you think you have found a security bug in OpenSSL, please report it to us.

Note: Support for OpenSSL 1.0.0 ended on 31st December 2015 and is no longer receiving security updates