V8 fully uses Chromium's Security process. In order to report a V8 security bug please follow these steps:

1. Check Chromium's guidelines for security bugs
2. Create a new bug and add the component “Blink>JavaScript”