To report a vulnerability, please open an issue or a pull request with as much info about it as possible.

After reporting, you can expect the authors of Commando AI to patch it ASAP, according to its magnitude.