Reporting a Vulnerability Vulnerabilities can be reported privately through the project repository using the Security tab.