To report a security vulnerability, send a private message via the BGforge forums:

https://forums.bgforge.net/memberlist.php?mode=viewprofile&u=2

Please do not file public GitHub issues for security disclosures.