Reporting a Vulnerability If you discover a security vulnerability, please report it by creating a public issue in the affected repository. If the vulnerability is critical and you need to share it privately, please send an email to the repository owner.