@zwass hi, I follow the Security Vulnerability Disclosure

If you find a vulnerability, please see CONTRIBUTING.md#how_to_report_vulnerabilities for how to submit a vulnerability report.

However, I cannot find that section in Contributing.md in current master branch. Hence, I just submited a GHSA in the repo. Do I miss any other steps or that's enough already?

A GHSA is fine.

ok thanks for your info