After discussion of the issue on the JIRA if it is clear that you found a bug then you should file a JIRA (unless you found a security vulnerability).  Follow up on the mailing lists if you want advice with respect to workaround or a local fix.  Our JIRA is located here