You can find all information on how to report vulnerabilities at https://psirt.bosch.com/report-a-vulnerability/.
Please include the repository URL in your report.