Contact cat@sspanel.org or use Github Security Advisories feature to report a vulnerability, do not use issue tracker.