If you would like to report a security vulnerability in fts or a dependency, then please open a issue. We will respond within about a week and start work on a hotfix.

Please also report a vulnerability in a dependency to the creator of the software.