To report a security vulnerability to NumPy, please first read https://numpy.org/devdocs/reference/security.html, and then go to https://tidelift.com/security and see the instructions there to make a report.