Please see the Security Policy in the root of the repository for information on reporting vulnerabilities and security best practices.