You can report a vulnerability through GitHub. Your report will be acknowledged within 5 days and you will receive a more detailed response outlining the next steps in handling your submission.