To privately report a security vulnerability, please do so on GitHub via this form.

Further details can be found in the GitHub documentation Privately reporting a security vulnerability.