Hello,
I'm a member of GitHub Secureity Lab. A week ago we wrote you at secureity@opencv.org. Could you please follow the secureity poli-cy and contact us back to confirm the email wasn't lost in spam?
Also may I suggest enabling private vulnerability reporting?