To report a security vulnerability, please use GitHub's feature for private security reporting.

For more information, please read: How to report vulnerabilities to LF projects and foundations.