If you've spotted security vulnerability, visit Issues section and report this just as a standard problem related to Reposilite. As soon as possibile the author should investigate this case and resolve problem with a highest possible priority. Because it's free and open source project, there is no guarantee how fast the fix may happen :<

You can also try to reach the author through private communication channels descirbed at dzikoysk.net.