Security Policy Reporting a Vulnerability Security vulnerabilities can be reported using GitHub's private vulnerability reporting tool.