Security Policy Create an issue. You can email me if you think it should be patched before public disclosure