To report a vulnerability, please follow the GitHub reporting instructions: click on the "Security" tab at the top of the repo and then click "Report a vulnerabilty".