Private security reporting is enabled on this repo. In the toolbar above, just go to Security -> Report a Vulnerability.

Please DO NOT create a public GitHub issue in this project.