Email dev@araluma.com with a description and, if possible, a reproduction. You will get an acknowledgement within 7 days and a fix or mitigation plan within 30 days for confirmed issues. Please do not open public issues for security reports before a fix is released.
The published npm package file-input-hardening and the code in this repository.