Please report a vulnerability privately, not in a public issue: use Report a vulnerability on the repository's Security tab (GitHub private vulnerability reporting). Include what you found, how to reproduce it, and what it affects.
Reports are read and answered as soon as possible. The live demo at demo.fieldopt.dev runs entirely in your browser and sends nothing to a server.