You can report security issues via the issues section or contact the developer directly.

If the impact is severe, you may also report it directly via email by following the link.