To report a security issue, please use the GitHub Security Advisory "Report a Vulnerability" function.

You can find it by clicking on the "issues" tab, then "new issue" button and then "Report a security vulnerability" (see in the screenshot below).