Please report security concerns that impact repos under the dotviz GitHub org via ivan.goncharov.ua@gmail.com.
Our goal is to provide complete, accurate, and actionable disclosures once a reported issue has been sufficiently understood and there has been a reasonable opportunity to deploy fixes.