Potential security issues can be reported publicly on GitHub Issues in the same manner as non-security issues. However, if you would like to report them privately, email them to mg@maximgurin.com.