Security e-mail address

Hi Webmaster. Is there any mail address that can be used to discuss security issues related to PHP? We know that we could use your bug tracking system to report problems, but it doesn't seem appropriate to disclose a security bug before PHP developers have a chance to look at it. We are a Linux and network security research company that lives in Brazil. Maybe we have discovered a problem which has some security implications. We are not completely sure if it's a bug in PHP (and how to solve it, even if it isn't), and would like to share it with the PHP people privately. BTW, sorry to bother you with this, but your mail address was the only one I could find on the www.php.net website. -- Flávio