Do not report a vulnerability in a public issue, pull request or discussion.
Report it privately: open the affected repository's Security tab and choose Report a vulnerability. If the repository does not offer that button, message an owner of the zooai organization on GitHub and share the details only once you have a private channel.
Please include what is affected, the steps to reproduce it and its impact. Allow us to fix the issue before you disclose it.