Report vulnerabilities privately through GitHub: open the affected repository's Security tab and choose Report a vulnerability.
Please don't open a public issue for a security problem. Include the affected version, steps to reproduce, and the impact you observed.