Security Policy Reporting a Vulnerability vulnerabilities can be addressed via an issue pr or by email.