Report it privately through GitHub: Report a vulnerability. Only you and the TA-Lib maintainers can see the report, and the discussion and fix stay private until an advisory is published.

Please do not open a public issue for a vulnerability.

If you cannot use GitHub, message one of the maintainers listed at https://ta-lib.org/about/ privately, for example by Discord DM.