FAQ.md

@@ -106,6 +106,10 @@ Then add the following to your local host table:
 127.0.0.1    petstore.swagger.io
 ```
 
+### I've discovered a security vulnerability with OpenAPI Generator. Who should I report the issue to?
+
+Please contact team@openapitools.org with the details and we'll follow up with you.
+
 ## git
 
 ### How can I rebase my PR on the latest master?