We don´t offer centralized support. The Project is published under GPL-3 and thus should be maintained by the FOSS community. There is no guarantee of continued maintenance by Mario Stöckl or the original developer.
We strongly recommend to immediately disclose any vulnerabilities via GitHub issue, or better, make contributions to fix them.