Private GitHub Issues attachments are public to everybody

Github unfortunately refuses to fix that issue but doesn't inform me that all images + concepts i post in Github Issues (private repository) are public for everybody (i know the urls are cryptic, but whoever catchs them can visit them everytime without my password)