Reach out to the project lead directly when reporting a vulnerability. Do not use public facing areas, such as GitHub issues, to report security vunerabilities.
Additionally, you can email support@scholarsome to report security issues.
A public security advisory will be created once a patch for the issue is available.