You can report security vulnerabilities privately via email to [email protected].