How to report a security issue in an open source project

From Jacob Kaplan-Moss, how to properly report a security issue in open source. A very important issue!