To report a vulnerability, please open an issue. The issue will be reviewed within two working days, however if the fix is simple, a patch is usually provided in few hours.