Scans from off the shelf tools produce an absurd amount of false positives, which no one wants to waste time on.
If you found an actual issue, please report via our Hacker One page, which is mostly in place so there is a layer that validates each report and ensure they aren’t invalid.