Hello,
I'm a member of GitHub Security Lab. A week ago we wrote you at security@opencv.org. Could you please follow the security policy and contact us back to confirm the email wasn't lost in spam?
Also may I suggest enabling private vulnerability reporting?