Please do not report security vulnerabilities through public GitHub issues.
The easiest way to report a security issue is privately through GitHub. See Privately reporting a security vulnerability for full instructions.
Alternatively, you can report a security issue via e-mail or anonymous form to the IBM Product 安全 Incident Response Team (PSIRT) following the guidelines under the IBM 安全 Vulnerability Management pages.