See latest release

The security policy is essentially poorly applicable to IX-Ray project, however, if you consider it necessary, then contact the project administration to report vulnerability