To report a vulnerability raise an isse in the issues section with proper steps so that the issue can be reproduced. You can expect a reply or a step taken to mitigate your issue in a day or two.