Not applicable: this project does not represent a tool that can be deployed.
Please report a vulnerability to the project leader, found at https://owaspai.org/connect/
You can expect responsible disclosure and to be updated personally on progress of processing the report.