You find a vulnerability? patch it, push change to repo maintainer.
https://xkcd.com/2347
Reply on news.ycombinator.com