To report a vulnerability, simply open an issue. We'll try to patch it quickly.