If we discover a bug in a theme registered with us, we will provide a verified bug report to the author so that they can get it fixed ASAP. By providing a verified bug report, the author doesn't have to spend time trying to reproduce reports of issues that may or may not be actual bugs.
If we discover a security issue in a theme, we contact the theme author immediately so that it can be addressed.