security issues

[El_Muerte]

At the moment a mode with a security issue is simply moved to the graveyard.
But this is quite useless for existing users. It would be nice if all users would receive an email that the mod has a security issue.
It would also be useful if there's a general mailing list with security notices.

I recently had to deal with the vbgsitemap exploit, lucky for me it was on the old site, but still took me over an hour to clean up the mess.