To report a security issue, please use the GitHub Security Advisory "Report a Vulnerability" function.

You can find it by clicking on the "issues" tab, then "new issue" button and then "Report a Vulnerability" (see the screenshot below).