Simply create an issue specifying the vulnerability, proof of concept, and optionally real-world scenarios where it could be abused in order to better illustrate the importance of the vulnerability.