You can report minor vulnerabilities by creating an issue, or if you're able to remedy the issue, creating a pull request. For major vulnerabilities, please contact one of our team members.