Vulnerabilities should be reported as an issue. If you have a fix or patch present upon reporting a vulnerability, you may create a pull request and the proposed changes will be reviewed promptly. Thank you for your cooperation!