Security & privacy issue with user uploads

Who should I write to about a security problem with user uploaded content?