Please don't open a public issue for security problems.
Report them privately through GitHub's Security → Report a vulnerability form on this repository (private vulnerability reporting). (This form becomes available when the repository is public. While it is private, collaborators can open an issue titled [security] with no details, and the maintainer will follow up privately.) Otherwise, contact the maintainer @Lucrona on GitHub and ask for a private channel first. Don't include exploit details in the first message.
Useful details: the Fraglink version (Tools → Options shows it), your Windows version, the steps to reproduce, and what an attacker could do.
You should get an acknowledgement within 7 days. Supported version: only the latest build.
Fraglink never reads game memory, injects code or hooks input. A build that does any of these is a bug or a tampered binary, so please report it.