You can report a vulnerability by using:

1. the dedicated form provided by GitHub: https://github.com/Cecilapp/Cecil/security/advisories/new
2. the following email address: arnaud+github@ligny.fr