You should report any vulnerability to the project team as a GitHub issue or via email at [email protected]. The project team will review and investigate all reports, and will respond in a way that it deems appropriate to the circumstances.