To report a vulnerability, please check the issues page to see if it's already been reported. If so, feel free to subscribe to the issue so you can monitor it. If not, submit an issue describing the vulnerability.