If you find a vulnerability, create an issue on GitHub by selecting the "Bug report" template.
You also can report vulnerability privately. If you want to do it, you should use this link.
This project is fully supported by community. We can't promise that your vulnerability will be fixed quickly. You can always fix it yourself or wait for others to fix it.