Please report a vulnerability privately, not in a public issue.

On the repository's page open Security → Report a vulnerability. If a repository does not offer it, write to eggs.gd@gmail.com.

These are small, independently maintained projects, so a report is read by one person. It will be answered as soon as possible, but there is no guaranteed response time.