Report a vulnerability in any Zactonz repository by email to info@zactonz.com. Do not open a public issue for it.
Include the repository, the affected version, steps to reproduce and the impact you observed. You will get an acknowledgement within three working days and a fix or a mitigation plan as soon as the report is confirmed. Fixed releases are noted in each repository's changelog.