To report a vulnerability, please contact the current maintainer:

https://github.com/scorphus (keybase: https://keybase.io/pablito)