Report a vulnerability in any mobiumdev repository privately, through GitHub: on that repository's Security tab, choose Report a vulnerability. The report reaches the maintainer only. Please do not open a public issue, pull request or discussion for it.

Mobium's own policy, with what is in scope, is mobiumdev/mobium's SECURITY.md.