To report a security issue, please use Report Security. We use security-labeled issues for our intake, and do coordination and disclosure here on GitHub (including using GitHub Security Advisory). The Security Team will respond within 5 working days of your report issue.