oslc4net is in the 0.x phase at the moment.
Only the latest released patch is supported.
oslc4net accepts vulnerability disclosure using Github. Refer to https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/report-privately for detailed instructions.