To report a vulnerability in mkdocs-include-markdown-plugin, open a private vulnerability report and you can create a patch on a private fork or, after reporting the problem, the maintainer will fix it as soon as possible.