Create an Issue and put the label [security] in the title of the issue. Valid reported security issues are expected to be solved within a week.
[security]