Since this software is not a productive version, please submit an issue or pull request for any bugs or vulnerabilities you find at - Jira Service portal for NCPeH questions
In case of a responsible disclosure, please follow instructions on https://www.gematik.de/datensicherheit#c1227.