You can find all information on how to report vulnerabilities at https://psirt.bosch.com/report-a-vulnerability/. Please include the repository URL in your report.