If you think you've found a security issue you should report it privately as described here https://umbraco.com/trust-center/security-and-umbraco/how-to-report-a-vulnerability-in-umbraco/