Security Policy Reporting a Vulnerability Please use GitHub's private vulnerability reporting. You can expect an initial response within 48 hours.