Report vulnerabilities through GitHub private vulnerability reporting when it is available. Do not create a public issue containing an exploit, leaked credential, private infrastructure detail, or security-sensitive reproduction.
For non-sensitive defects, use the structured bug report form.