We have code security standards being followed since 1.0.0

How to report a vulnerability?

Create an issue in the project and you can expect to get an update on a reported vulnerability, except if the vulnerability is accepted or declined, etc.