For all security related bugs, email security@ansible.com instead of using this issue tracker and you will receive a prompt response.
For more information on the Ansible c 2FAC ommunity's practices regarding responsible disclosure, see https://www.ansible.com/security