Please use the Private vulnerability reporting in the security tab to report a vulnerability in Assemblyline. We take security very seriously and will address it as soon as possible.