Type in 'ruby-lang.org' and get redirected to the https site where you find 'security' as a main menu entry. There you find known issues and ways to report vuln

Type in 'ruby-lang.org' and get redirected to the https site where you find 'security' as a main menu entry. There you find known issues and ways to report vulns. Try this on php.net. [Edit: I tried to download the stable php release via https. Try to guess how that worked out]