Email support@dynotable.com. Do not open a public issue, pull request or discussion for a security problem.
Include the affected package and version, what an attacker can do, and the steps to reproduce it. We confirm that we got the report, and tell you when a fix is released.
Only the latest release of each package (dynotable-orm and dynotable-orm-codemod) gets security fixes.