Please use the GitHub Security Advisory - Report a Vulnerability page to report security issues.

You will receive a response indicating the next steps in handling your report.

Thank you for your efforts to responsibly disclose your findings.