Security issue Reporting

Hi - I would like report a security issue in this repository and I see security.md is missing. Can you please add that file and suggest what's best way to report the issue. I understand the repository is old but the issue might still be relevant.

Thanks