To report a vulnerability you can create a new issue by clicking "new issue" in the issues tab and then clicking on "Report a security vulnerability".