Report it privately through GitHub: the Security tab, then Report a vulnerability (https://github.com/openfluids/linstabpy/security/advisories/new). Do not open a public issue for a vulnerability.

Expect a first answer within 7 days. Fixes go into a patch release of the latest version.

Only the latest release on PyPI receives security fixes.