All kinds of security vulnerabilities should be reported via e-mail or by contacting me via Discord (Panquesito7).
Do not share the vulnerability publicly in any way! This is to prevent it from being exploited.