If you believe that there is a security vulnerability in PowerShell, it must be reported to secure@microsoft.com to allow for Coordinated Vulnerability Disclosure. Only file an issue, if secure@microsoft.com has confirmed filing an issue is appropriate.