Please use the Private vulnerability reporting in the security tab to report a vulnerability on Assemblyline. We take security very seriously and will tried to address it in the smallest delays.