To report a vulnerability, please open an issue. If the vulnerability is accepted and fixed, a new package version will be released and a special announcement in the release docs will be made.