You can report minor vulnerabilities by creating an issue, or if you're able to remedy the issue, creating a pull request. For major vulnerabilities please contact [email protected].