You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. <a href="https://patchstack.com/database/vdp/js-support-ticket">Report a security vulnerability.</a>