I highly recommend self-hosting electrs.

Denial-of-Service attacks are excluded from the threat model - DO NOT share your electrs instance with untrusted users!

Contact me at dev@romanzey.de and include the following:

Code – A proof of concept demonstrating the issue.
Description – A thorough explanation of the bug and its potential impact.

In case you consider this a sensitive matter, I will provide instructions on how to set up a Signal encrypted channel.