You can report minor vulnerabilities by creating an issue, or if you can remedy the problem, create a pull request. For major vulnerabilities please contact [email protected].