You can report any critical security issues directly to the developer through the Foxe Labs contact form.

Do not report security issues on GitHub or on the WordPress.org support forums. Thank you.