If not or you need an update here; there’s a security issue I’ve reported.
Hover over the category to see what it’s for. Basically, yes, github is the place to report 'em.
But if you’re already posting a thread about it, can’t hurt to put some details in here, no?
Anyone smart enough to read what you wrote and understand it can go look it up on github.
Hard day at work?