Please don't report security problems in public issues. Email hello@ajithakdev.com with the repo name, what you found and how to reproduce it. You'll get a reply within a few days, and a fix or a plan before anything is made public.
If the repo has "Report a vulnerability" under its Security tab, you can use that instead.