To report a vulnerability in lychee-action, open a private vulnerability report and you can create a patch on a private fork or, after reporting the problem, our maintainers will fix it as soon as possible.