Please report security issues privately through Report a vulnerability, not as a public issue.

Include what an attacker can do, the steps to reproduce it and the fileshare version. You get an answer within a week. Fixes go into the latest release only.