Use this section to tell people about which versions of your project are currently being supported with security updates.

Create an issue without specific steps, but rather a description of it's effects. Than email a contributor specific steps for how to cause the vunerability.