You must never report any security related issues, vulnerabilities or bugs including sensitive information to the public repository. Security vulnerabilities must be reported by email to [email protected].