You can report a vulnerability by either creating a new discussion or by opening a new issue if you are sure about it.