Please report suspected vulnerabilities through GitHub Security Advisories:
https://github.com/svenbuild/diffly/security/advisories/new
Do not open public issues for security-sensitive reports. Current supported releases accept private vulnerability reports through that advisory flow.