Open an issue at https://github.com/LilyAsFlora/reddit-fetch/issues.
You can expect the vulnerability to be acted on within a week.