If you've found a vulnerability you can report it by creating a new issue.

I will do my best to reply as soon as possible.