To report a vulnerability in prek-action, open a private vulnerability report and you can create a patch on a private fork or, after reporting the problem, our maintainers will fix it as soon as possible.