Pug (ex-Jade) for October CMS composer require pug/oc-pug-plugin Security contact information To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.